SC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

[  146.347669][ T8031] loop1: detected capacity change from 0 to 512
[  146.381151][ T8031] ext4: Unknown parameter 'subj_type'
23:05:42 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r9}, 0x0)
syz_io_uring_submit(r4, r8, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x4}, 0x80)
r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
r11 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x40000)
ioctl$FS_IOC_GETFSLABEL(r11, 0x81009431, &(0x7f0000000180))
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r10, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r3, 0x2a71, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000100)) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) (async)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) (async)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000100)) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) (async)
syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r9}, 0x0) (async)
syz_io_uring_submit(r4, r8, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x4}, 0x80) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x40000) (async)
ioctl$FS_IOC_GETFSLABEL(r11, 0x81009431, &(0x7f0000000180)) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_submit(r10, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r3, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async)

23:05:42 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0xffffff7f00000000, 0x0, 0x6611000000000000)

23:05:42 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000008)

23:05:42 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:42 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:43 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10)
bind$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x3}}, 0x10)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000780)={{r0}, 0x0, 0x8, @inherit={0x50, &(0x7f0000000080)={0x1, 0x1, 0x1, 0x26, {0x4, 0x3, 0x0, 0x9000000000000, 0x7fffffff}, [0x5]}}, @subvolid=0x3})
syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x869d, 0x0, &(0x7f0000000180)="83659d03de12169d879ef7c475d4c5c929bf78f90313b29910a01bf183f0276bff34e7177ff9986cec7651b43800f767b4532443554c28aa5baae2b53acb0ad03fb68cde26c799f3d13bcdf83b656c79c29c4d668ed954aea60bd0b9f25230fa50b03993af5f14febf51ebc43c55bf78d0776f86d64bb6d3df27810fe919a8cab4e91e36d160595b2ae58ede5fb2d33e0e219b57cae3fe040d7f376032df9543da25a1c44321cfc662767676ad9660a5eab5f4b406", 0x401, 0x0, 0x2}, 0x1)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x4, 0x3}, 0x10)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:05:43 executing program 0:
r0 = syz_io_uring_setup(0x6697, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x0, 0x1, 0xffffffff}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x9)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0)
io_uring_enter(r6, 0x7414, 0x8a3e, 0x2, &(0x7f00000000c0)={[0x2a2]}, 0x8)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:05:43 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x308, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffffff, 0xff000000, 0xff000000, 0xff], [0x0, 0x0, 0x0, 0xffffffff], '\x00', 'veth1_macvtap\x00', {}, {}, 0x87, 0x8, 0x5}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xfffffffe, 0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x31}, [0xffffff00], [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], 'ipvlan0\x00', 'batadv0\x00', {}, {0xff}, 0xa, 0x1, 0x5, 0x2}, 0x0, 0xd0, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xfff, 0x2, 0x1000, 0x0, 0x0, "40aa64fa48a387ed8a0b980df03febbd22799790aedf2ce54e537bfa33d01f1eabf6ddb0de2b677ea1af25b7e381c35b91b6c67385c798a27f0dd9b0eb694f38"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368)
recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

23:05:43 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, 0x0, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:43 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, 0x0, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

[  146.875868][   T24] audit: type=1400 audit(1645052743.074:245): avc:  denied  { name_bind } for  pid=8079 comm="syz-executor.1" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  146.898034][ T8081] x_tables: duplicate underflow at hook 3
23:05:43 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, 0x0, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:43 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) (async)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x308, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffffff, 0xff000000, 0xff000000, 0xff], [0x0, 0x0, 0x0, 0xffffffff], '\x00', 'veth1_macvtap\x00', {}, {}, 0x87, 0x8, 0x5}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xfffffffe, 0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x31}, [0xffffff00], [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], 'ipvlan0\x00', 'batadv0\x00', {}, {0xff}, 0xa, 0x1, 0x5, 0x2}, 0x0, 0xd0, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xfff, 0x2, 0x1000, 0x0, 0x0, "40aa64fa48a387ed8a0b980df03febbd22799790aedf2ce54e537bfa33d01f1eabf6ddb0de2b677ea1af25b7e381c35b91b6c67385c798a27f0dd9b0eb694f38"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368)
recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) (async)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) (async)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) (async)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

23:05:43 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

[  147.022769][ T8091] x_tables: duplicate underflow at hook 3
23:05:43 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0xffffffff00000000, 0x0, 0x6611000000000000)

23:05:43 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x308, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffffff, 0xff000000, 0xff000000, 0xff], [0x0, 0x0, 0x0, 0xffffffff], '\x00', 'veth1_macvtap\x00', {}, {}, 0x87, 0x8, 0x5}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xfffffffe, 0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x31}, [0xffffff00], [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], 'ipvlan0\x00', 'batadv0\x00', {}, {0xff}, 0xa, 0x1, 0x5, 0x2}, 0x0, 0xd0, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xfff, 0x2, 0x1000, 0x0, 0x0, "40aa64fa48a387ed8a0b980df03febbd22799790aedf2ce54e537bfa33d01f1eabf6ddb0de2b677ea1af25b7e381c35b91b6c67385c798a27f0dd9b0eb694f38"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368)
recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) (async, rerun: 64)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) (async, rerun: 64)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

23:05:43 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x661100000000000f)

23:05:43 executing program 0:
r0 = syz_io_uring_setup(0x6697, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x0, 0x1, 0xffffffff}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x9)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0)
io_uring_enter(r6, 0x7414, 0x8a3e, 0x2, &(0x7f00000000c0)={[0x2a2]}, 0x8)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
syz_io_uring_setup(0x6697, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x0, 0x1, 0xffffffff}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x9) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0) (async)
io_uring_enter(r6, 0x7414, 0x8a3e, 0x2, &(0x7f00000000c0)={[0x2a2]}, 0x8) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)

23:05:43 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:43 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) (async)
bind$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x3}}, 0x10)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000780)={{r0}, 0x0, 0x8, @inherit={0x50, &(0x7f0000000080)={0x1, 0x1, 0x1, 0x26, {0x4, 0x3, 0x0, 0x9000000000000, 0x7fffffff}, [0x5]}}, @subvolid=0x3})
syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x869d, 0x0, &(0x7f0000000180)="83659d03de12169d879ef7c475d4c5c929bf78f90313b29910a01bf183f0276bff34e7177ff9986cec7651b43800f767b4532443554c28aa5baae2b53acb0ad03fb68cde26c799f3d13bcdf83b656c79c29c4d668ed954aea60bd0b9f25230fa50b03993af5f14febf51ebc43c55bf78d0776f86d64bb6d3df27810fe919a8cab4e91e36d160595b2ae58ede5fb2d33e0e219b57cae3fe040d7f376032df9543da25a1c44321cfc662767676ad9660a5eab5f4b406", 0x401, 0x0, 0x2}, 0x1) (async)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x4, 0x3}, 0x10) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:05:43 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

[  147.521379][ T8107] x_tables: duplicate underflow at hook 3
23:05:43 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

[  147.654014][ T8130] validate_nla: 29 callbacks suppressed
[  147.654030][ T8130] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
23:05:43 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:44 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

[  147.777155][ T8132] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
23:05:44 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

[  147.854247][ T8134] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
23:05:44 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

[  148.043167][ T8137] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  148.088781][ T8141] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
23:05:44 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000003)

23:05:44 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
setreuid(0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0xba701, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000f03b0000)
sendfile(0xffffffffffffffff, r1, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@remote, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x80800011})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x34, r5, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}}, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x2, 0x2001e, 0x0)

23:05:44 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10)
bind$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x3}}, 0x10) (async)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000780)={{r0}, 0x0, 0x8, @inherit={0x50, &(0x7f0000000080)={0x1, 0x1, 0x1, 0x26, {0x4, 0x3, 0x0, 0x9000000000000, 0x7fffffff}, [0x5]}}, @subvolid=0x3}) (async)
syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x869d, 0x0, &(0x7f0000000180)="83659d03de12169d879ef7c475d4c5c929bf78f90313b29910a01bf183f0276bff34e7177ff9986cec7651b43800f767b4532443554c28aa5baae2b53acb0ad03fb68cde26c799f3d13bcdf83b656c79c29c4d668ed954aea60bd0b9f25230fa50b03993af5f14febf51ebc43c55bf78d0776f86d64bb6d3df27810fe919a8cab4e91e36d160595b2ae58ede5fb2d33e0e219b57cae3fe040d7f376032df9543da25a1c44321cfc662767676ad9660a5eab5f4b406", 0x401, 0x0, 0x2}, 0x1) (async)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x4, 0x3}, 0x10) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:05:44 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000008)

23:05:44 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000300)

23:05:44 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:44 executing program 0:
r0 = syz_io_uring_setup(0x6697, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x0, 0x1, 0xffffffff}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x9)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0)
io_uring_enter(r6, 0x7414, 0x8a3e, 0x2, &(0x7f00000000c0)={[0x2a2]}, 0x8)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
syz_io_uring_setup(0x6697, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x0, 0x1, 0xffffffff}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x9) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0) (async)
io_uring_enter(r6, 0x7414, 0x8a3e, 0x2, &(0x7f00000000c0)={[0x2a2]}, 0x8) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)

23:05:44 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

[  148.374901][ T8153] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
23:05:44 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg(r6, &(0x7f0000007840)=[{{&(0x7f0000000200)=@in6={0xa, 0x4e23, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4da}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="52485693822a80e80bd354ddbfc90950b12a02252badffbf42565ca640011e783ca3c2cfb01b718faac8ade1639c2e1124f55def80d920c25950703161e4d55b", 0x40}, {&(0x7f00000003c0)="8e3cf1516f7a5aab54099c1c22aecc5c23ca8a48877c721104c4bb5be676e2f0db9bb4605899c37e221b9253719eed5098f8a85a688d84a41d366b512f8ac265655b714c98006b1d3425b56ad26c46c016edc8ce27fdcacee86a5f6975ada2", 0x5f}], 0x2, &(0x7f0000000780)=[{0xe0, 0x3a, 0x9, "6ea3b55a9eec6f0aa6a9e6753bbe84d3112af6a55ab5ee113cef1b2f744a71339dbf20d927d92e102fc5a94f58ea7f9425be8bdf4c689798855db34eb89dae7ae9dd5ce39d5e53ea80036ab656c325ee5a9c46bd666f47dc07d49d2faab5094b1ed16688ffdb2d6b99805868d099935421da0b1ec1bcb159f1074b40acaf8226166a1e41715a8aa03f0b1fd3f72f32d4dbf0b3e614812ec48210782e0e5e3ff7976f11dc2c9142cdc5d29f1b4a4ce66c654c8fa9935d8a075784c65584b4bd11fed1f87f0a29b20c9c15d0c77e822002"}, {0x50, 0xff, 0x400, "bf79d2811e8791a201c0274ce1f473e3c469d430479695f7ab61d7f6bd64c5483f2f66231323998e30b3b25c14f38dc7c1923ef3ac16593952e351faa72a"}, {0xa0, 0x3a, 0x2, "b9e64aa0a5a91aedf728be4c20ba7a7b9892c0182f1d1b02923b625fb08feffb6f5eb077ba1d16faccc8dae43f4cdb0a4868b8824b9d36e8937bfe7044d545f4c1ae43d6c01ddcd9190389745d32b804e39f27604d289ce17eba7879c0c1d600efa3dd23d0a78363e11cc53bbb292903dfe562fcb334a7835f790d0b22c339d1e783166aa20859f0ac38fd8049"}, {0xf0, 0x11, 0x1000, "1456361e8f4fb5d5415c4a4aaee06c9585d3354ea293c830269b41b765c2b12a1ab1312645628d24d9be755cedd9929fa34e2dd288e620dff31196c73ca0c7ec6086f7df14f2b9c235aa5e723075c90dfa8a4c9af613752ae4140bf5d871b0e354e6af919966f231fa3dba872bcea367cd434bc897e61fe82b32e2a111c64f12ac9291b9667a91696161e815faeb046cf2a5d80c530b838879cf21455ea652de10984988f4a679f7b8725e2c321371a6174e109a3a7a9fa9b0bf80c5db4d51238b3726337d0ce0dd11af5726f778f5ccfe4f9d384ba12268873c62"}, {0xd8, 0x119, 0x1ff, "6232d0e3ff1eeafe47846767a86980a0402f5f1d3f3f3804a6b6831c51b069c5808bc2abab3101f8166f6878102aae1172869b4e5295ee8d1c17ace99f6ce40422bac6db4dd738b9e15cef8d22d92b760e529e4185d41be8f1df9ae69ce46512b122c0d7696658eb14d2cdec446fbe86174c3d01e23885fa7eca0c891d93751e9fdcf0b120c6a0ef33035636b42e3d6691e3fdda23e9698d1c394e62d2593ae7df0f7814d714f58ab9e7ddda284e5e25f241571e4cdb422b33d315b9fba6e13b363ad5e414d325"}], 0x398}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)="e22df95d48b31988b2637563c256239153c73485f4506529e0c94479e2d757e1adf9a4729d2adf7441f90a302e5d002d2747108119fff680967ec203da75d6fbf423552f1ab51b8135067e7945f5ac3ded5d424e8305203b1b1951082f2be0", 0x5f}, {&(0x7f0000000b40)="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", 0x1000}], 0x2, &(0x7f00000004c0)=[{0xc8, 0x1, 0x5, "d06034d5b134f084e4fcdfaee1f1c6e1d5403ad946c96a505d89294d5508148d9f2554f31bc6ecfcaa140b0300e7d8891866c20b12742677e8efa00ed4f5c6362d2896c3cc118b9027e636cf1264b692a0b8406d6196b5fa5cccc6104faee2035f57ddb99be2299e69aaa1451733a48f79c85ccf6d2ffc9b4bfd2acdc7a29a7394d1deabc180591e48834102dd66a28fd9d9bc1f520f3cb10a47f322b767ed620a92b288d78f10e1f05ea6616f2dbe2d834fb57edce3c6"}, {0x48, 0x118, 0xffff0001, "535db204b91cf55e23d56b5ef55188ebc7c3b20abb9597fff5fa2ec29c488413adb394ae8aae6ca32c841aa44c7a140984ef36a7500770"}], 0x110}}, {{&(0x7f0000000640)=@sco, 0x80, &(0x7f00000006c0)=[{&(0x7f0000001b40)="3d9992830e8f50847af6be9ef3a9be2d04c103588c02631d274fa90ca728dbc35021377a1a76c39eacb2a6ffaa827a5a07d281c073ed1f9f9660c3b53ef59023c08b41762655f9fe60223f41519ffaf47f4db21f3832384daece06a756c22107da3143cf3f438bfbcf295419735f9e1465806d5b7859d044cf24bf7a889cb72fdb981882a18f0774c5444a18042254a77fce462bcb0fe0450543ab1ae80209c1e2a366930c9e49a02c4322618afcd8c94aedf8db0d968e29ec44d49d0142e7312ac71fdbc34595644dbb68b467ce76e89cc344aa9ec082ae553eb7c8481263b2b3f9e686097e90b481417f3d6a8a44af1af5506920153edf09d9e4f33d84e3ccdd98a121b6d40db23ef55c9c4901a6c4e401d90bdde3ebac8365807f08b42f7c11bcf7ed9c4719a660b759052daabc3f8b81053ba8e856e65371aa2ba04b904dbd4566c8fb35c21ab154be10f70a8ae36a1d44e87afd620be218f39f7526502fe40331aeffe614291490a446e23008ea722b8fcdf88c9893105cc8796e667b6400612b81667b59b81c593d253c94af2b5653800722af63fc3bfc7272afc8ee65320ff62d619a2245fc97e3645b5663a077dc00335a1cedf7832fa2793f4497baf2e957a27d53adc2cd7bbd9cfad0b0172ec5131d05900c37fec0503a921390f742ba0bc7eba19ee950e5189085676573ee65042e7a2c36f8a1e44b12f0f261d4bffce5af1081856c9d375c34a8bb61c69211da8e8a068c7af098c73cfe80540376e9baf5013b07c117e15bd108f47cf32e1b778c859b3c13d42254a28a40586fd33a0cb3a74b14db00f7bd2440aacf808464956e391f5b038f27c4b8179489c87cfda15378ca81dc01a1b6e649345455f0e75cbdb062043c79bd9c4b6fbef4580ca9a6a944bc2b4446b75c72fce8c1833681229f6f861bf018df0e7b1bccb76fb797c9a65d1caec41f7a3dc411aabc6db2e52f2e609ae8d014033e3a267d5e3ed2baac3f76e518bd20d74915d9de58fd3b6044d0fc4d977de78df54638b1008baf4748b4ad0c05d17c49d9545de7bb0fc688e6d7d7cbe7a32cfcff01928f28471755f810cdc3cd623bc446d60fc9bcacc2b8d7f3459faa71b072d55e7690ed8b8db2ec9dd31f6bd936584d2f0b7569f1c6bb9359b684ea5c00cfaaa3e46ba630ec15a2810b1550be555460be2ccef0726423a32cc8e62b1eb5e5ebfaa92376ac1925864c4346d199f9ecc40dbabd596dc956087e36647604428220bf9b79b06512e8d5f805ca0964f4d3c3c9f52bfd7fda11e44e929aa27eb6f1e2fcbe8d357ec89d491dd432a1cc44d6f00586a6af228dfb8043a4bf2891dd121ab3ea62d9a171e4932f1574c3fd60b849216a2f68d06a6187a4cc0f79291ae951b77c5443595e67e1ab4c5605b3d624b331dbe8dc56de304f6b64100940ceefbb881d4b4cee1ebcb54771f911e33a0f615a57f62f9f241789522dbabb5091dd3d861aa684af95195a5446f36178ec6e0ecf2f26a71b51a1d0f22ee057699a8693e0439b6cababd2837efa546d3b41185f2f0a49df9595f0441dae410df1a2a16651b18ea3b06e4ad2b3ae4e52c956111994b60ae908bef4b31052d0c1c232c029c38e0fc0d057844b0aba3d268ee69d5428b3176cdf8189755a9442dedd8748754d0a4e9ad1b9e7c58c9aa776a376731623a68d0db9e35e0c833c2f3530f4098f07990f6e2c1f2e4ff90e259c2a3293f963e73fb7ca89cea2449219b03dbafc03b9e05e88747a100bcb60f754c0e0765c4da03dd879da8006513167461d93e4a0cffe935894eea8d7ac8713d528bb0bb3cd32d9b9ffd34eea15e25ac925e6794987d7b635015ad15700384678dc28daf3176472a3bf0fd9e957a2de704806e2b546812fb1566399567dfe34b1d4b274dbf0c7feaa323391a95a4ae2f79a384119f2be3391f6ea8d0111e07ba349b5e877751a6d3a6568463e185258bf033b2b6f8f24a39577baaa928730bdaaf81a80f03438f700878beadd018fa59a265d904038945a4759f4230b806fe4003332e806a21cfbc1fff45d148d72c5c52b88616dbf461c3a27df69aa50c90ec92e1db81749c4f37d388228ad855d8429deac535395dc98a4cab25ec7a70e9b7da4107ec6f9e5dddd62865f5e9e6603760ab1c3731adad5bca017249dda83d2338bf384ea2675aeb6e58f6feb7b6bb0a4b23bd5bf9d2f0b7b2be3667dff8aa5572add309ab3b73f869f63e275230fb26f92c679926f6ba7cc0226f18536ada792476cb913902f5d869086b204bb8e08757fc36efcf83c14ecc9efe9d91b535bc531a9999b71e9edd3b60e74e02fcc9ccb3526f36e911c9e1dd07fc39b840bb4d1ac7249fb9fb6cbbfe7198a9cc0678827447eae6033cfa5a2ac590e69d856fce0db3ebdbf4b8274efdd493940bac17dd6a3d59839b730bfab2f4ac711c2dbc58f1c3da2f523ca3024f81b937afd208bd0fbee467ba65985c3d4bcce3367c383130f7c007b07ac4977265428b85be9ed7904ed85cbd14880ae974a4bebf945dda6ec7dc7e619a8e88f9fff23a7da09b8032794838b8436e4dbd514de68f9a008dad7463539a7dce7d604f985aa0f193be31227e1e97a123fb401af6faed61b6472500922c632ad4421a7822d42b69df3c4262b0c89122387f175385d5e8cce6331308b763b2ed2f613bf17d9ffbb751d81acaaf32173271fef2e87657419754479f30f1a0ad304c05e2da9691a3d637cfcd78e27907cce682122806f079bf4195cdab8599e283179d8d63e0268b3ba4d96191c58b07d7f136bda6a4b4a213564c78c8c4c0e54256b25147688df641b9bc9ca48ad3119c760a8dfa3ad1aabbbca83eb7bde7bb39d590c4ebe99cfc20c5da971a0bd391061f4a26c495fa8283fea21abedf328e7cc097fa3f55ed95ebf0b082f4eeb872c36e3106e09a97371e8d2e620e0accd5077b31c5dfec164c57ecae7872a9aca163f81b18963c12db9aa96e0f390eedbcf58efa23a600e0d15d9916e24137c3da1086ae439cb2007c589d17eb8aa1633ffc1d96c81e424d8ca3c72166c064b146b3a4d21f62695d98961cc475edc45a6d8b3adbe5310fc8984cbe5d73f6da289767bd0c2851f2f9fc7e4f5c36991a2b8bfda55f8a8d4852b96a469991f49b552db3c1d43c7bf181dbb0f807f40b2b8c99a6b53c9794e4b7a17be0199ee7ffbde2bf2433ba4d7110deb18ec473b13434ce8e58747c16a406e8133e30f0299dc124a594006665d277225bfed39e82f5f09bb8451d2eca58a1a69a6168df64426ab59a77838ca6b0620b5244e2745d1430f515d5bdc2c0183a794fdb8ced5675b5226d53a88d82c3229284992da6388a6a1775fb6a705b11c1c16a7239bcd795cbf234f0787ec864b0853f2807decebf996e5899809e35d73fb117e8cf8133c359a69e39caf80604c1d79d2174a5ca23ff2f15310521b7cd1a4f2c444de6f40c6c0b81868af6ec3bed3a4e83e35e16134d537ba9c7745b262e63cbba91bef761ab4dc47cccb31063311f9f9d59a259585e324d14fdd5aa1bed392d8902d2a33d42cf0b95b8151dfc364f05c37f5a9088acee2ec5171e50df24f706814c3d663a4bf1b5006a9c73171dc639b8fbdc85b370443c431164468c6db2d7356075640e0dd88ceef2b3c37f0ac50ce6da21942537ad1c4cc8daf524a6b3b50ed196ff2035dd7b1053a80d91c2e625e81a44ab4e20ff080e2894772fcf43686f3037a20c1b6036c0223f16559445c01c8cf88c1a1448c2ccfaa7d4a5faac85efaafccd87226ccc99a07138dd1e5e3e464add9bf0986111d00faae42c5129c43b99f74f66c553172059ab6dca98b4f89a4386e5d1b9618a8baa20f7dd1d3ac365762485d9ed5dda19fd64366b9276f0d3962c505a91976b6b34daf55dffd4e6c0f42a070a9f11e72f24604ef7a48355f20ef0a6fdaaddf9e78af924e684730d53476634c920149b3aed69014acb933662b7e55781b63997049af7e4d5c0780cd34af077dae13406108f9d65c8681eaaef296ba0e0a7a49db98697a88b2086b51685b2214207e6d15007165c05f36832798282db23eeb425ef8c7a4c0489e62456d833d26c62d68308648e76ee522b423bfdb32d9297c3a553eeec97c7fc3eb728ebe13af6dfaeb05659915846a14ce16863f810fe8c48327a5c608973465e39cb239153412305c4ca5d926e06bed5b2e1e1c271a98e4b5e81a0b4bd2f8c032732572b1ca1d3fe51f30a6285b8624c52db4434e42f3845f75ab8333b761caa6fc064d9efb9f13fd126634aefc7358d066b66ce4e0629a442fc40ec2d5946d0c7a3d8f2fd03093c5474de77250210c2f6f0b15d89721c9bce62af488f2fbe975dd811bf4702df8aa653c7ab5b15e5601556859448c61d2e4903f629a9530195a7adb1cca8e3afa34a55dea483deda264a2471164ace3036abe86e67e570fd09e98eb6e8cd172593c4907c0f9169dac39f10335df752b09f29a47cbb1ad4a13950a2b151c13b7b24b2a807b26ba28cf925914a80166293fbfb89214ec60efa665bb2ff532856dbf758962259f25c596c36540fdedf84402b13ed6ec4b22d5a1734e32983de8d09b50b70c0b70a51755c1fa42ad33530faa6cb4caadf188054e82c0dd801cc168c04df97cbe11049d45af0aaadf0da882b131fd0c1476730e109c89052a635136940d4ac97aea6b60e3f6b1b2abed4b66493c80ea5c654324ce4386d15472766cff6b5bbc6e5b421a6af7ae4047209e89a3ae5eb3ebd095aeacc2119708c9ee7d7f44d7d6435215dd66787b69e58ca43c1a99ad54ef38b0841d789819aa5ef6ad2db6199417fb2b114336ca1740e6a8350cca85f9860d561e1d796ea00ab38d886c6bfa931e28382f34c188a1e524268d008ee493fb03d8c29421fab536bd22e49754c029f7d54c9773cdfde45ca87170b01d6e5107e6e8c328dc31e87e24b325ad333887bd5b314489c5332a647267650bf08fa5d587f06802c750b9565da04dfaafd24ee0315c9dd36509005e8f0485ebe7f3bf8555456980e26144bf141fd8defdd7d633f5e161693ebaa62c45fb35eb7c2755144de32b92571c2364760b8b4c696c2713b7eb67eafbf7ca209666fbcc7516dfef25bd0cc067fdfcde43c0b287b5149362e744ed7f12787d7ce92c89c2af09e59818e682e9e0b60a99b6bd380161e694c74059bdb48c84aef1427fc06913e10e1c0af6158621b7e50bb113a0df7106ffae376cac2073e1c8e59614606cfcaa5d2eb3585289af9da46b735e21c2a6ebcedb39f07b2636690c19e3a0254f55dba6a84ee51c350cb96c712e1bcaacf9252f4b1e8394fd1adf66c8f34fbd18477b03386aa644da93f04947782919b035710acc8fb0c0fb5cdcf9babc87df0db342e73a402102028f94ff32e3fdc3fb754a185fab1bdc2ce5225e31b75922891dd3c42255ca83d5b87053e415169786a38833c6ba6439ec8d9aca56b785b5f701331a189bbd39eaabd877e6e2fe2648c5f1d4f0f4c202bbcb11dd0986c571e385c2290ad6f6548a0818a3e0cd1fc0970c7884d00479ca799b9361f8e41d0674824c43fa0a6527003a5ed82068ae7e2bc5d04f695f24600c3561ff06aa3bb64e3e25f2d044e6196f310bea92d41394a443d3edaf4390bfca0418823110af79ba6ffadb068cbe0ef4bf50146a1091cedb68eaf2a1d46028520023fa531963279531f2ab3da13ca10e6cbae919567bbc2913db992b7199da056234d56d6d052aa794c96d0ea45144e2f51112b6dca11e34cddc39bc86", 0x1000}], 0x1, &(0x7f0000002b40)=[{0x1010, 0x109, 0x2, "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"}, {0x80, 0x107, 0x2, "5b5ef7ccc6cea87e611bb897d5e0574abb724db071e4aeceda5704ef86d50c3611c026bdcff37e4a61d7b25ecd7b68f7f1cc5128e74f1a8840aef52df852d618171291a06b621e204a9e60ad5f6350bf91c6d760df9a635b04c886f643df34acf4bc665127ae399121aeb6ea3a82"}, {0x1010, 0x0, 0x9, "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"}, {0x58, 0x1, 0x1, "2b9c6865d1fddc6ff1d9140d6f9e14dcae2ef0cea0eb27396bfe49846666e86ecff32383e568dde28645323298eba8a30c0467560fd22c9161b4a2ddea91bb6cff6391523560"}, {0x18, 0x10a, 0x5, "d6bd749548e3"}, {0x38, 0x111, 0x80000001, "7a32985a98dddd253228668016876d9c1a3c4104a847c531a2cc73f3ade7f8bd383f9e33"}, {0xf0, 0x108, 0x2, "6b8052429a5a6220324f1b9a154c02fcac12370e5e6942918329122e4ef39ba1329c2dd45b437b3eecd8acd866d9b2a825a4a02cc7019cb18d35e8731f496fc541c3093eeb5cdb1f78d80fe20d5a41848400e6556510e3f4a2b84dd727dfccfdc8d6fe080fb1db25ded2e136b24781958587efc1dba16cac9f08a41c19fd3c5bcb9bebecab6c96ee16f698ffaf0f93d943042184117d789312942844b87f7b6ab5f8b043db8daaa115649a9da1a10c26141b56a486b480edcf7429e919654d8ca080bb8f7bc0a4390e7ab4b2bb4e7004ba20b8e4f77867b73ccfe8430f49fe"}, {0x48, 0x10c, 0xfff, "754c281a0a2793b7f1922ddf7304f69cd07af79b0e7dfc2ddb67fa8e2ed66d3f442ebd9b57a7b932b287bb0111bf8786958b1f074ae728e4"}, {0x1010, 0x112, 0x8001, "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"}], 0x3290}}, {{0x0, 0x0, &(0x7f0000006180)=[{&(0x7f0000005e00)="7861a32e3e48e4ffb1c09ecded16859ddd40c1d101a7db3995201086fb80ea389774997c2aeb11766a69752e74cc51208eca20d70c11d3517eb3e64f55fcda2c42dda73a8f96a90af2ca253e46e9980f81f84632efd3f4439c4de05e53532bf0f91c74ce6eaa618a3696906e88e2cf766e8b9564cac4ddd34a1d6a8d622b23e24990753de2a943963bb6b46752ef7229b10547f8fd057c997f66b99356941b52edde4751f97ce873201a55e33e662fb90bb08c8defd9bc274a4afabc929808aa288cc0", 0xc3}, {&(0x7f0000005f00)="cedf5ebbc13e85bdb2bb9c9c2fa44c5d0b206d68d685da55d4375cf0e9b6d78b34e8429444ddc7ca5ac0d2a19bea4fa04a88107914b9e77b1c6822d49f641ba80f6af0c1835fc2b0194c02f8bc70469bd89d5b411f6d5ae201d8e64d71c534c6ef65d590ffe8e5a27e940691ee690fb36a17e9ccdc28473be61f0c02d75dcfde8b7314d14b198227ac0f57e4d574d7be7f20032b409e4561e8db39a7ff73d3982111f680d4ab400ca082943355f842c8e698472c371106be1a2edc413619e3709397e8e0d21d3afe2af79b37fd375bbe6499bd0e8b7fbdcaca7e66c50c2d3f65c59a470c4e92600c8bf72bc855ef90a66e5e5a", 0xf3}, {&(0x7f0000006000)="1ba7e0f0ef268187327cb849e3586a390b1ac96db6671e341ceddd639f23c5023873552faa392dec4cc3d0439ae3b76568de91f27a7f8190a48f48bf81b374165dedd78995fb43f381fa4644f9bcf0a27fdf418788641ae0", 0x58}, {&(0x7f0000006080)="2c320c5afe3db4d4e67218d6117a742deab200f519e4edf7ea8c97fe696437308f56b5f1ee3e57cdf0d537f780060851963a75e2ffee058d4113e556f34412ffd56923fd436432ea2471", 0x4a}, {&(0x7f0000006100)="bdbbbe31e1a2f82db5cbffc51cfb79001aaed1b6", 0x14}, {&(0x7f0000006140)="d02c2b4537f6", 0x6}], 0x6, &(0x7f0000006200)=[{0xc0, 0x117, 0xffff, "f8fd18422ab6c1114bcf302719142a6dd442718dce04c85664e34dd26956d94c76adf7fc0033a962e7286aa2e58cfc85149f96c39af131a4f5eb3d343bea1e4e7b858b4c4b105002674de5cd652ffd12fe2ca501dd60841819538b17f2ab9d0734f2312bf1c95d50aa53760ef984307ed1c1d07a0c8c0369dad796b37c8ca7e339228933cd3e22908ff379823b87896a13480763d38566a8e8f44be0bcf06f7083a1bc236f86949a52"}, {0x60, 0x10b, 0x0, "d6f5992073239a93b9b999189f9271224721519161104f2fca7a0a6daf16b349729c537cf096ec83c0f47e7fed1d2d6b59af9559197201105210b6a4e5138dc0adc70a14a74731efec73aac04c"}], 0x120}}, {{&(0x7f0000006340)=@l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x1}, 0x80, &(0x7f0000006780)=[{&(0x7f00000063c0)="b24ec5248251aab7484c4e25cc81a4819233523113f37520ca942245a0e2bbd4abaf860e91b96998d88c808a79d12cfc44f25519fa8fb29e6ebcdfa739e3396b1fcb9026994afb6400c042fa4126a5d349e1bc2904cd411f7091b763a55cf9e5d71b857c5b4726b161217beb5d38852fb15b5d7c9709bba9bbb0858705e8fa2d849d04f540d2327d2350b1e806ccadf68453121f1aaab08d09e740ca2e7d09eeeead00ac9fd35c06f2653d58a22698b0f1a69022ad9bd664a34168968b1e00f2aea9bc91f514309300f9e67faffcf1ebc074c865f106f43fe6cddc7f0b1a671af53f08a1307d11f7", 0xe8}, {&(0x7f00000064c0)="996a5d381f2e44409b9583c0669ec885e6a69d00ddd4a875068bd003c49efa218b93fae1da4de539ea957d64be74040a7f076f79d2365d32174d0e6d763b7966d977a7e98b00d7f4be05be6ae97c2ccbd28b362dd9db9cd1ff11f8a8f4c8247ef1f30813618434f6fdfbdbbb89320589995e2573773d9fbb089fb1c53e1fa43a1a4bcdc79bcb64180b90fadeea4b535220e04876b96a9c79abf81c9407f5cb0187ee53cec792b39b17f36c77345b83d4c9025958c5e82ff11a540cdbdc7fd244907582f417e873de7f7d60a3d7137f68a63279bc4b2d7e4e735cd0240932e263f9257f97832d353326a53e1b936785608f67a348d1a8b1e4", 0xf8}, {&(0x7f00000065c0)="c218ae6d6276d1949f3789af635c7ba7cae7ecbe056bbd05f0f1d8c75cdf2d07a50787ef5ae7f6f5ccca57df15251c3e1a7560f1761122807da1cecb642707c2e8be6e095d24f2087fcce3ed01182adbce1a3e458e0d20a896d5ffaa974086eb56291dcc98f3f1691dcfc1a114bcace25291167e4e54d489f0c5af4a58784ea69304d5802b551b03a606ab8fd0cefc15d290d3", 0x93}, {&(0x7f0000006680)="fd07a2724a5273a9c5f992b677ccddcbf20d45baacc0b5743baaba03c4d4733a6a28beee9222da3461eed078f59d7d16f0a72da1a7a559f5e8962b4c6d3636eaec6e67cb326eef39c6a41205f88f6ac6dfb8a96ea68bfbe67d1779e0bab76a69e120ac1c20322b73f8d8bc3ee4186e665b1599cc24bbd1fee29921ccffef3791f4db828ee58a5b032fd8adbc4d2916a89155b6e29869ea0a7a036c4949f085e505f6e77b7313700b394cd21a6f4771250e136c3e169731562dfc01cf8b4a88693e5923750ceb8e32953cd2f4ff36dff86a58c8c51a3f452dc447", 0xda}], 0x4, &(0x7f00000067c0)=[{0x1010, 0x113, 0x2, "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"}, {0x68, 0x10e, 0x9, "b467e8438a3ca90467526f0651af60002c7d0d75f2597f54f670eb56cc5ca7877556d25950c94312c2368c7f661829a85701517e40deb2d94d160f3fc7f0630f90c3bc5493dd3058623ea01d7a22f6bc83"}], 0x1078}}], 0x5, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0)
r8 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=<r9=>0x0, &(0x7f0000000100)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r11}}, 0x1)
syz_io_uring_submit(0x0, r5, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x7, &(0x7f0000000080), 0x1, 0x1, 0x0, {0x0, r11}}, 0x7ff)
epoll_pwait(0xffffffffffffffff, &(0x7f0000007980)=[{}, {}], 0x2, 0x9, &(0x7f00000079c0)={[0x1]}, 0x8)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

[  148.444544][ T8167] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
23:05:44 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:44 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

[  148.573795][ T8182] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  148.664280][ T8184] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
23:05:44 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x0, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

[  148.774744][ T8186] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
23:05:45 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x0, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:45 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) (async)
setreuid(0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0xba701, 0x0) (async, rerun: 64)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (rerun: 64)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000f03b0000) (async)
sendfile(0xffffffffffffffff, r1, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@remote, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x80800011}) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r3=>0x0}) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 32)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x34, r5, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}}, 0x0) (async)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x2, 0x2001e, 0x0)

23:05:45 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x0, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:45 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x661100000000000f)

23:05:45 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000f00)

23:05:45 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_misc(r3, &(0x7f0000000080)=ANY=[], 0x2bb98205)
mmap$IORING_OFF_SQ_RING(&(0x7f000042e000/0x1000)=nil, 0x1000, 0x3, 0x40010, r3, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
write$binfmt_misc(r6, &(0x7f0000000180)={'syz1', "c2c3840d065b0bfa7371999f6fcb9c95ed5aa68d1767bb579b9e455fa195699359f14e83f9616b4d2e6f73fb21f1bfaf250e1872be8f44d8470512e29c300e14d748c75235ad7b20db5eaab87cb7f9e0741b4e50a3a8eaf70c71d4517a2eeb5eca071e9e131e3b21dabf69a4b149ee16c41169e35925d52764a4338aef5313d34d9c0d2dcb20113e0d7be74bf7412bb9a806e2c0d296e59971e1aeba87d49ab072e1860de297fcf648b6d064149af670647d657c61b6e314aeb139969d03f7a77d62507c23586ad128323c71e03a78d500bbfab4eda07e0ed8c99b151de93935f99390421ca43dc8db102c"}, 0xef)
syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:05:45 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async, rerun: 32)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0) (async, rerun: 32)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg(r6, &(0x7f0000007840)=[{{&(0x7f0000000200)=@in6={0xa, 0x4e23, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4da}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="52485693822a80e80bd354ddbfc90950b12a02252badffbf42565ca640011e783ca3c2cfb01b718faac8ade1639c2e1124f55def80d920c25950703161e4d55b", 0x40}, {&(0x7f00000003c0)="8e3cf1516f7a5aab54099c1c22aecc5c23ca8a48877c721104c4bb5be676e2f0db9bb4605899c37e221b9253719eed5098f8a85a688d84a41d366b512f8ac265655b714c98006b1d3425b56ad26c46c016edc8ce27fdcacee86a5f6975ada2", 0x5f}], 0x2, &(0x7f0000000780)=[{0xe0, 0x3a, 0x9, "6ea3b55a9eec6f0aa6a9e6753bbe84d3112af6a55ab5ee113cef1b2f744a71339dbf20d927d92e102fc5a94f58ea7f9425be8bdf4c689798855db34eb89dae7ae9dd5ce39d5e53ea80036ab656c325ee5a9c46bd666f47dc07d49d2faab5094b1ed16688ffdb2d6b99805868d099935421da0b1ec1bcb159f1074b40acaf8226166a1e41715a8aa03f0b1fd3f72f32d4dbf0b3e614812ec48210782e0e5e3ff7976f11dc2c9142cdc5d29f1b4a4ce66c654c8fa9935d8a075784c65584b4bd11fed1f87f0a29b20c9c15d0c77e822002"}, {0x50, 0xff, 0x400, "bf79d2811e8791a201c0274ce1f473e3c469d430479695f7ab61d7f6bd64c5483f2f66231323998e30b3b25c14f38dc7c1923ef3ac16593952e351faa72a"}, {0xa0, 0x3a, 0x2, "b9e64aa0a5a91aedf728be4c20ba7a7b9892c0182f1d1b02923b625fb08feffb6f5eb077ba1d16faccc8dae43f4cdb0a4868b8824b9d36e8937bfe7044d545f4c1ae43d6c01ddcd9190389745d32b804e39f27604d289ce17eba7879c0c1d600efa3dd23d0a78363e11cc53bbb292903dfe562fcb334a7835f790d0b22c339d1e783166aa20859f0ac38fd8049"}, {0xf0, 0x11, 0x1000, "1456361e8f4fb5d5415c4a4aaee06c9585d3354ea293c830269b41b765c2b12a1ab1312645628d24d9be755cedd9929fa34e2dd288e620dff31196c73ca0c7ec6086f7df14f2b9c235aa5e723075c90dfa8a4c9af613752ae4140bf5d871b0e354e6af919966f231fa3dba872bcea367cd434bc897e61fe82b32e2a111c64f12ac9291b9667a91696161e815faeb046cf2a5d80c530b838879cf21455ea652de10984988f4a679f7b8725e2c321371a6174e109a3a7a9fa9b0bf80c5db4d51238b3726337d0ce0dd11af5726f778f5ccfe4f9d384ba12268873c62"}, {0xd8, 0x119, 0x1ff, "6232d0e3ff1eeafe47846767a86980a0402f5f1d3f3f3804a6b6831c51b069c5808bc2abab3101f8166f6878102aae1172869b4e5295ee8d1c17ace99f6ce40422bac6db4dd738b9e15cef8d22d92b760e529e4185d41be8f1df9ae69ce46512b122c0d7696658eb14d2cdec446fbe86174c3d01e23885fa7eca0c891d93751e9fdcf0b120c6a0ef33035636b42e3d6691e3fdda23e9698d1c394e62d2593ae7df0f7814d714f58ab9e7ddda284e5e25f241571e4cdb422b33d315b9fba6e13b363ad5e414d325"}], 0x398}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)="e22df95d48b31988b2637563c256239153c73485f4506529e0c94479e2d757e1adf9a4729d2adf7441f90a302e5d002d2747108119fff680967ec203da75d6fbf423552f1ab51b8135067e7945f5ac3ded5d424e8305203b1b1951082f2be0", 0x5f}, {&(0x7f0000000b40)="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", 0x1000}], 0x2, &(0x7f00000004c0)=[{0xc8, 0x1, 0x5, "d06034d5b134f084e4fcdfaee1f1c6e1d5403ad946c96a505d89294d5508148d9f2554f31bc6ecfcaa140b0300e7d8891866c20b12742677e8efa00ed4f5c6362d2896c3cc118b9027e636cf1264b692a0b8406d6196b5fa5cccc6104faee2035f57ddb99be2299e69aaa1451733a48f79c85ccf6d2ffc9b4bfd2acdc7a29a7394d1deabc180591e48834102dd66a28fd9d9bc1f520f3cb10a47f322b767ed620a92b288d78f10e1f05ea6616f2dbe2d834fb57edce3c6"}, {0x48, 0x118, 0xffff0001, "535db204b91cf55e23d56b5ef55188ebc7c3b20abb9597fff5fa2ec29c488413adb394ae8aae6ca32c841aa44c7a140984ef36a7500770"}], 0x110}}, {{&(0x7f0000000640)=@sco, 0x80, &(0x7f00000006c0)=[{&(0x7f0000001b40)="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", 0x1000}], 0x1, &(0x7f0000002b40)=[{0x1010, 0x109, 0x2, "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"}, {0x80, 0x107, 0x2, "5b5ef7ccc6cea87e611bb897d5e0574abb724db071e4aeceda5704ef86d50c3611c026bdcff37e4a61d7b25ecd7b68f7f1cc5128e74f1a8840aef52df852d618171291a06b621e204a9e60ad5f6350bf91c6d760df9a635b04c886f643df34acf4bc665127ae399121aeb6ea3a82"}, {0x1010, 0x0, 0x9, "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"}, {0x58, 0x1, 0x1, "2b9c6865d1fddc6ff1d9140d6f9e14dcae2ef0cea0eb27396bfe49846666e86ecff32383e568dde28645323298eba8a30c0467560fd22c9161b4a2ddea91bb6cff6391523560"}, {0x18, 0x10a, 0x5, "d6bd749548e3"}, {0x38, 0x111, 0x80000001, "7a32985a98dddd253228668016876d9c1a3c4104a847c531a2cc73f3ade7f8bd383f9e33"}, {0xf0, 0x108, 0x2, "6b8052429a5a6220324f1b9a154c02fcac12370e5e6942918329122e4ef39ba1329c2dd45b437b3eecd8acd866d9b2a825a4a02cc7019cb18d35e8731f496fc541c3093eeb5cdb1f78d80fe20d5a41848400e6556510e3f4a2b84dd727dfccfdc8d6fe080fb1db25ded2e136b24781958587efc1dba16cac9f08a41c19fd3c5bcb9bebecab6c96ee16f698ffaf0f93d943042184117d789312942844b87f7b6ab5f8b043db8daaa115649a9da1a10c26141b56a486b480edcf7429e919654d8ca080bb8f7bc0a4390e7ab4b2bb4e7004ba20b8e4f77867b73ccfe8430f49fe"}, {0x48, 0x10c, 0xfff, "754c281a0a2793b7f1922ddf7304f69cd07af79b0e7dfc2ddb67fa8e2ed66d3f442ebd9b57a7b932b287bb0111bf8786958b1f074ae728e4"}, {0x1010, 0x112, 0x8001, "8e7465b3e0819f75cfae02a8769d71fffb46981d018fdcbb4edce45c01de34a56d3da9cd12e32d7904b3053f7d0cab279f4a76ccea5d37d10a5a269532bf8041a28d54a1cd655d495cdbcd1d962c8b2436ea9133908c199b53360984d6014ccc95d421d9763d24d7fabb16edffebbdc0ff51b7f7c57d3b55668a97c3628a4ba5b50ad7929e311ebbec2308ee2dea1b56aa07dc46ec2b88efc771a29c7014b6cdb35e9e5d2a8154d5b2a9ad8f9060e93f3ea4a647f14ff6c2ec1da2b75612026d81d329c2243a0b37d7f2f02adb815090701af9c0485346d0bd5e95b208d0dd89ee43de31204262f7921e6d47461aeb32309f8b522059a175875b75515b0f2b25446f615a7c211fdef3a50cf025f1614e8a2a8fa1f5e429e63b0151cf1c694a58f8b87fd8bb35a8576bd03b18243a7f1311ed90eb676d464eac54cfa054c90fa7d3b281852a53a0c955346c54e4255b22743fbb28fc10e09b353588a68370df3349da8bbdfa9228cb29891f7ca42070110d59de5fc5d3194450d2cbf8fa5a2d4244ff370d5cd66130f71ed76feb4257496e8c09dfa24f0d4399be043ea1746cb0db31f79d228d97358fcf15beb56d5011994e498a09971743eca841ac3fa0f4c38343c62a596fc889d58045e66fd58e6d2279846d9eb2e5ac4c3c8d8ecb7d8e77a48c719e47fdd3339f32877fcc6e1e6a296fff6eace1e79b050cd21f02948befec5057704998c058b15643b860a50d19e729b1162081c779e275de813d4d0c6b751ee1803322c49deb319d2149130558d5f4e65a40b6c4d62dd80f7f47e2d6d6bbca1f4272236e580d33da642c74d05a8efc96490b2a6a20a31cf3dd9eab43e996d9f29baa9c86b04a38ddfe43f46fda7ae2f78d4dd74d77a70de5215ad8c5dd4fb626f143f24c1df855124805a581cd8cbbcb226b93a76b8b1eb40a2f6b83f9d7c22dd645ff98691f66db9b6a2c99a39a6c65882a3b29eb6c9854ebbf013ae6e6bb28c0c82e6e12fe02954197fc61f3143a3a8ba795c42e136c44a871bb7b4478fa0c229fbc6dd2d0542bba78e7d4387f81d35dc9d0ec9ba442cef793823cd1c8c8cd29ef01b79945b29b6380ecd4ca94939849bf405aac76530d9acb63128fed10ecd6502cb89f6bd29fba038edd7d866fde2ad379f381fb81e3a6f2269cf39cb325069da2ad56f49a20559932140676471c3f9b1498f6b383853573579915caf056136b2b085dc6af0d19cffff9cd13267ae77fd483c1b19b07fa688e4d6793f9bbb3c2f52eb947e2250a5cdaecd6cadfa28e5e8940f971c7f66611154c557f0e40f6760b5cfd9ff77398308a8ef83892eb2ae6269bce9ea70c5f0b4960e27d252a601a530652748b15f90b3013473fc51aed93e172bee5c9fb909bc53fa6f34c48976209c5bc4debdc30eac805e9d081daaf72ac000690d593cd2fe497b06a761ff5eb61057c6ab9008465e494d5201253d6c10744a442865fda0375af570d5abdf1b887c92f2dbc3a7d705ad13508717e8a8936d905dbf8606b3891058209f70d2628a7ad93b38300af151091c6639b22d2e8843eb362c6ba22ea25220156ceb766d85c6c494cf63ce5db8170803f7b06779432a4ebd3a5304a67db6b6febf5a6ae0a43716ef34fbd500d6ee6235c7953fc6987cb5b9256616ded32b1a7a1ea2214b1cce14e2c4c2b22dbe26fdb5116574c21e02c001993d51144737324d12b2d95c76dd6e5077ca650547b23dac575b3783768caae5f5aad70d1d10d62fe65b65de0e0ff6a14f71100361d92cb61bf6fb32a097450db02f50b9c6ec2dcacfe571fae0b161f6d6c70fdfac887321ccfff4a31144d7214bfa5c0869fca7a9048d31c042f1943a6d8c8f7d76568c49248e665867db6dc9c7164ac39eb9e492f15941d46f608a95a07b2d9520cca8403dc55d7f6154252d5827b933251e15a8e30c511d4a01e8365fe2a3a0ebeefb695ef1876a63308e29d5a900749ed105e912b5257a34cd10fbe725f33d84558f2deca207a28fec56defd7f6af77a96282d68180f19f16ddc0f6b2acfb9f023828efbe2abd294ac295d1b2829f7a75f839cba829c278293ef3af27aca4113e41874b4c12ac6a4a2e88810f760edea1e3b7d38028756d662211908565094abea8d842a0f415e720d971320a5e2315827212d9a2b5e5bf870614484e9b26952a67fa6e97293d4549d9b4c77acc7c465aab0558472f1a9d3867c1fe29b8b1f09ae70a3fab3566fe77eefe0ca26863bc160b5c11dadf486e4c3a03c778a24f743ed56eca0ac406c946fd997eedd4e1bee9bc35fb22d24038fb91ad0cd606e177c627016de20686181844600ac5d92eafbe15fd1152e0d0fe7063359ed8d800621a2319cf10b6db8d7d52ad081ede97c5dec761e9ecf04921d59178f1ef870bbf0970c51ef8546875ddc94087b0d59620c2038ff6a625021995930f8b0d975d21ebf537b5d120bdf51c151198df7113807dad2c7df1fa1df0dcb822d83e60847dc5c43f30277d92fd39c1b468f1f2523bfc6549c364b5a5e1c86f06bd5e2d3905845ec42831efd7c5eb8720a71d5fdf9a094f38259c2df0aa1c2fe1316dca21f86a35707b0bbf678368e6c61cab998a82fefce570f6091547fde203f51ea29e804ee26c1b808e0a52e39d1506bd833ebe361b816c21297311e0666a06efeaceaa461cd904fb6c0355856ea56db2968d814241b84a40fe0bb6315ceb38d2bcb0931883a845f8b8674eb44cffa7038411ec0063532e642dfcd29626acb4bbf830a49062ca3e3ec3e65e642866fb6c83b95ca163fef5e30a280894612f3eb1eae3550f79987e0e1dcb362278316a1c15e14a314987630729c40ac62cd384f7134a58d86f8cf79e6c221bb549a7f9ceeed82edf489bc1b0181ca8daf9b76714ed925474245408ed22deefa45d41b83ffda7aefebe296c51f3670004de374753c2711ddb919a853848973ad9a4b0f0a87ca9c3dc2208f1a4812dcda57a774c81b5e4482bd73f86640bf036206e140e5342b721f360bc0fd1664e9259f7e563a1e3196925318918965e6fbdeb952de5d36c3128554c742034150a3bbc476ccf26638727684c81637fa7fc83a530688da13578c79e749583254127b388b814784952f950c16f2d5df36bf743cf30a499899db61a60c55eed107ffbe2ef12343d024dfb8084a3d1e0fc6a22414df46bf417df9aa26b0d8aeb5fdf1b3b9957170a431d77fb6e4a199819e3b7415c7434f2638fd928203a5978e7e78ef8ac2e3b9780daade19ea4669416198ef9721b80673cab0d5458041bfb2df03c7483b4e94f509c1e92a43573fb8c0ee98315157717b96742efca080e8c80553973f2fb7cef502df96f871b52306f367e678e59e2683ed3f1e0ae759aa33b09edb8a6262b733b8d483c7fb789edffa82b391a7a9e03c3807d22b85e57254686098beccdc69bb0f4649c5ec6c77fe09b98732283631769b0e686244ebc776c95eefa65a825872f3fb6c7a90b8f151130940a509dbed2fc8810306b42dc4e86667dd8aa3a3793845747fd3639c95a5a13d58150957fe6d48fce3dc23ced11df0820539d382d3db0c872b225135283a4c62dd08899ff1a8e550a785ec1797dc616b54d670828efea9433698beb78973bce45f2201329a71b3a364f459d9a4a9e3f22225aa15a325220001dcdf1822a18f9265eecb51f066431e750db2c997b245018afafe99a6f2a03c01b5e57ffadf8a371efbd9af54bdd295bd8b723dd03498bdf586146c1f755d0286505037d88c619f99216e7de6b70e33b46faa924dae166a9301851c2f2c6359e59b352e3906edec0e32f9dbd6f1759b740be66b86b000e683eed99cfe5cc4df9115d63d520835ccc0e687ab679c9e661aa28651a617b60c2ee01360160b515f13661f55b72adf523686dd7200affb5809d49ab5afd6f654f92c9bd65a54a5cb6378a43a06db9dc8bc68306c5ce7329901126ba9678c4cb79b6889d11486d88a5cbe78c1e6de8be5a857e0ba2b18ca1ae942ee9d8891737b0350555512cf516bbbaf2167e96b4c1806f17c6967111ecc26b2a58dce20a3435c0b603bf6224dc2c559bf5c4b25fdb927523e4dbfdfe032be055b7d0e694869b1e1ef93275258b0af97d1db8f41dd7855174e2aefda26325806a21ffaa78028e7c4600362e088f75df7c6ea5b1e8caeabf4690687b5908246961c2de64e5a851b2deac8c0e9c10c93f5c119727a27e76f698d0020eb8bd2ea887f807102a7015723594edf2071123e061b1531a09a79add68a03ac4e03337a994b91ba2f8b78110353472d0ff6452de63112a3b9808d871152cd4ce5630e2db8646bb0c03a7d6f16fa98ef40e29f0391cb6d0a8a858d5ca54476f0ed07db8110ec4daa5d4659604c0b59f2609d49ee5cdf843339cecb901cb853c25bbc4547df7df285d9ed5141ea84403473a849fe87e7ddb81a83704bd59b51d4eb72e558b1614728bc81529f97e4cd4c591326db7cbce4f0bb4da79bc3148a14db05cda50961768573340fae0f3ce14001da280f271ed4b17a39f617a3166079b5ff0df510c15eac902017a9aa8e0ff937f192382c0606fd70757970f4dd3f86a37f8e980633a14e0b281d7d73d59c858dfe02333ac0480ce2a23022c5913005ed542581d8a858b3481b3d7b22e2b9300f97f8cebfc78498a80b89ab1adf3a38a2ab7a510451c7d2b4a0146c60be511a11b5042403f5b673e69cfb63f6c252358db6fd3189f37184c086b46d70155a72423c2b41a076a36889bf8ce03dce0c09fdc8971e89128f6b399ec7e82be302a868172fcdec1974de1392a9b98256d137670ca95c5a314f5a04c21ee8d5a6bfe8ad65dfa3d1735825b49229aa70520fe606740c69ba1a457664365107e12837496646b17cd6614ae1c18b3b012a68a4026ecdf0eaa4b4ecf554bd85f187df1c82c778c457a46d0c749a594779e7f83defe96abfa793a9046035ea275b5087f491ef542f1679e1b2e32b838d34bb9eb566abb04618d54abaff9d1b8a0492d904208ee4b22d48c2f3674fe6b721d4397a6ec091ee8eeaddbdc2f32d26b795e3a02409bf3f60122dc431fa9c0f8df970df4ca5f4af8ca39466c91af7f42ebd35a182a6aff5035caf25121f3a248af783c1a88585b6b48d3230c2e3f1c0804384eb0c0032e68d5f9bb638fbc715e94af93fe81b7634d82257ca45089101b0a42b36222a06004b27c73bd9ef922ec42d5ca79cf088e6f0801f1da56c1df275b5da446073506269494e5d8f453fd67db034ea82f5bb8e90ead8f724cf22dd25857a9d17aab8cc88c2827cf778d5096b8ce9b3f805acd175c8fb95b905ecf8df5ea534970300362c5488a9cfbded75fa7fda9cdfa7ad092887e06736172b318c719ceeb730d3cf7d27aa0c353983332d2af352ba2f8cd9d2ee977f9387678061afe422a26062da1a84e1cb2e386cae1b94d56a4393884735a3c36bdf6a1819735385f65d3ab837ea5ceb91596b4b2ac9cffd4b9ee6dc21ddbbb5527d2d4cb5577da0b3c1307e54668c01dad8ce7d9cdb5f7dbd8db77a83fadf276e6ae900338697ac0351ad1faa48cde8cbb0d203f4f8830650b3e927479a3e994c0c50940faed977cef9c91bca876723779764e8fe3033c1e432391a6eeb7bc8b9871e0d27f250c2ed529a25797aaa6fa70ac768dc5f7c66a20414541516ba11dc81c997bddf123cc2615dd550a2e921214a5b3f9779215e8b4b0b1f79f036a9ff0e060ee56712a72403166919df99d2c228c1522c5be515af4d8531be6422049f5"}], 0x3290}}, {{0x0, 0x0, &(0x7f0000006180)=[{&(0x7f0000005e00)="7861a32e3e48e4ffb1c09ecded16859ddd40c1d101a7db3995201086fb80ea389774997c2aeb11766a69752e74cc51208eca20d70c11d3517eb3e64f55fcda2c42dda73a8f96a90af2ca253e46e9980f81f84632efd3f4439c4de05e53532bf0f91c74ce6eaa618a3696906e88e2cf766e8b9564cac4ddd34a1d6a8d622b23e24990753de2a943963bb6b46752ef7229b10547f8fd057c997f66b99356941b52edde4751f97ce873201a55e33e662fb90bb08c8defd9bc274a4afabc929808aa288cc0", 0xc3}, {&(0x7f0000005f00)="cedf5ebbc13e85bdb2bb9c9c2fa44c5d0b206d68d685da55d4375cf0e9b6d78b34e8429444ddc7ca5ac0d2a19bea4fa04a88107914b9e77b1c6822d49f641ba80f6af0c1835fc2b0194c02f8bc70469bd89d5b411f6d5ae201d8e64d71c534c6ef65d590ffe8e5a27e940691ee690fb36a17e9ccdc28473be61f0c02d75dcfde8b7314d14b198227ac0f57e4d574d7be7f20032b409e4561e8db39a7ff73d3982111f680d4ab400ca082943355f842c8e698472c371106be1a2edc413619e3709397e8e0d21d3afe2af79b37fd375bbe6499bd0e8b7fbdcaca7e66c50c2d3f65c59a470c4e92600c8bf72bc855ef90a66e5e5a", 0xf3}, {&(0x7f0000006000)="1ba7e0f0ef268187327cb849e3586a390b1ac96db6671e341ceddd639f23c5023873552faa392dec4cc3d0439ae3b76568de91f27a7f8190a48f48bf81b374165dedd78995fb43f381fa4644f9bcf0a27fdf418788641ae0", 0x58}, {&(0x7f0000006080)="2c320c5afe3db4d4e67218d6117a742deab200f519e4edf7ea8c97fe696437308f56b5f1ee3e57cdf0d537f780060851963a75e2ffee058d4113e556f34412ffd56923fd436432ea2471", 0x4a}, {&(0x7f0000006100)="bdbbbe31e1a2f82db5cbffc51cfb79001aaed1b6", 0x14}, {&(0x7f0000006140)="d02c2b4537f6", 0x6}], 0x6, &(0x7f0000006200)=[{0xc0, 0x117, 0xffff, "f8fd18422ab6c1114bcf302719142a6dd442718dce04c85664e34dd26956d94c76adf7fc0033a962e7286aa2e58cfc85149f96c39af131a4f5eb3d343bea1e4e7b858b4c4b105002674de5cd652ffd12fe2ca501dd60841819538b17f2ab9d0734f2312bf1c95d50aa53760ef984307ed1c1d07a0c8c0369dad796b37c8ca7e339228933cd3e22908ff379823b87896a13480763d38566a8e8f44be0bcf06f7083a1bc236f86949a52"}, {0x60, 0x10b, 0x0, "d6f5992073239a93b9b999189f9271224721519161104f2fca7a0a6daf16b349729c537cf096ec83c0f47e7fed1d2d6b59af9559197201105210b6a4e5138dc0adc70a14a74731efec73aac04c"}], 0x120}}, {{&(0x7f0000006340)=@l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x1}, 0x80, &(0x7f0000006780)=[{&(0x7f00000063c0)="b24ec5248251aab7484c4e25cc81a4819233523113f37520ca942245a0e2bbd4abaf860e91b96998d88c808a79d12cfc44f25519fa8fb29e6ebcdfa739e3396b1fcb9026994afb6400c042fa4126a5d349e1bc2904cd411f7091b763a55cf9e5d71b857c5b4726b161217beb5d38852fb15b5d7c9709bba9bbb0858705e8fa2d849d04f540d2327d2350b1e806ccadf68453121f1aaab08d09e740ca2e7d09eeeead00ac9fd35c06f2653d58a22698b0f1a69022ad9bd664a34168968b1e00f2aea9bc91f514309300f9e67faffcf1ebc074c865f106f43fe6cddc7f0b1a671af53f08a1307d11f7", 0xe8}, {&(0x7f00000064c0)="996a5d381f2e44409b9583c0669ec885e6a69d00ddd4a875068bd003c49efa218b93fae1da4de539ea957d64be74040a7f076f79d2365d32174d0e6d763b7966d977a7e98b00d7f4be05be6ae97c2ccbd28b362dd9db9cd1ff11f8a8f4c8247ef1f30813618434f6fdfbdbbb89320589995e2573773d9fbb089fb1c53e1fa43a1a4bcdc79bcb64180b90fadeea4b535220e04876b96a9c79abf81c9407f5cb0187ee53cec792b39b17f36c77345b83d4c9025958c5e82ff11a540cdbdc7fd244907582f417e873de7f7d60a3d7137f68a63279bc4b2d7e4e735cd0240932e263f9257f97832d353326a53e1b936785608f67a348d1a8b1e4", 0xf8}, {&(0x7f00000065c0)="c218ae6d6276d1949f3789af635c7ba7cae7ecbe056bbd05f0f1d8c75cdf2d07a50787ef5ae7f6f5ccca57df15251c3e1a7560f1761122807da1cecb642707c2e8be6e095d24f2087fcce3ed01182adbce1a3e458e0d20a896d5ffaa974086eb56291dcc98f3f1691dcfc1a114bcace25291167e4e54d489f0c5af4a58784ea69304d5802b551b03a606ab8fd0cefc15d290d3", 0x93}, {&(0x7f0000006680)="fd07a2724a5273a9c5f992b677ccddcbf20d45baacc0b5743baaba03c4d4733a6a28beee9222da3461eed078f59d7d16f0a72da1a7a559f5e8962b4c6d3636eaec6e67cb326eef39c6a41205f88f6ac6dfb8a96ea68bfbe67d1779e0bab76a69e120ac1c20322b73f8d8bc3ee4186e665b1599cc24bbd1fee29921ccffef3791f4db828ee58a5b032fd8adbc4d2916a89155b6e29869ea0a7a036c4949f085e505f6e77b7313700b394cd21a6f4771250e136c3e169731562dfc01cf8b4a88693e5923750ceb8e32953cd2f4ff36dff86a58c8c51a3f452dc447", 0xda}], 0x4, &(0x7f00000067c0)=[{0x1010, 0x113, 0x2, "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"}, {0x68, 0x10e, 0x9, "b467e8438a3ca90467526f0651af60002c7d0d75f2597f54f670eb56cc5ca7877556d25950c94312c2368c7f661829a85701517e40deb2d94d160f3fc7f0630f90c3bc5493dd3058623ea01d7a22f6bc83"}], 0x1078}}], 0x5, 0x4) (async)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) (async)
r8 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=<r9=>0x0, &(0x7f0000000100)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r12=>0xffffffffffffffff}) (rerun: 64)
syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r11}}, 0x1) (async)
syz_io_uring_submit(0x0, r5, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x7, &(0x7f0000000080), 0x1, 0x1, 0x0, {0x0, r11}}, 0x7ff) (async)
epoll_pwait(0xffffffffffffffff, &(0x7f0000007980)=[{}, {}], 0x2, 0x9, &(0x7f00000079c0)={[0x1]}, 0x8) (async, rerun: 64)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:05:45 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x0, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

[  149.293859][   T24] audit: type=1400 audit(1645052745.484:246): avc:  denied  { create } for  pid=8197 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
23:05:45 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x0, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

[  149.355549][   T24] audit: type=1400 audit(1645052745.514:247): avc:  denied  { write } for  pid=8197 comm="syz-executor.0" path="socket:[37698]" dev="sockfs" ino=37698 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
23:05:45 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x0, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:45 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x0, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:45 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x0, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:45 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x0, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:46 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
setreuid(0x0, 0x0) (async, rerun: 64)
openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0xba701, 0x0) (async, rerun: 64)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000f03b0000) (async)
sendfile(0xffffffffffffffff, r1, 0x0, 0x8000000000004) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@remote, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x80800011})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x34, r5, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}}, 0x0) (async)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x2, 0x2001e, 0x0)

23:05:46 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:46 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000002000)

23:05:46 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000300)

23:05:46 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_misc(r3, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f000042e000/0x1000)=nil, 0x1000, 0x3, 0x40010, r3, 0x0) (async)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r5 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
write$binfmt_misc(r6, &(0x7f0000000180)={'syz1', "c2c3840d065b0bfa7371999f6fcb9c95ed5aa68d1767bb579b9e455fa195699359f14e83f9616b4d2e6f73fb21f1bfaf250e1872be8f44d8470512e29c300e14d748c75235ad7b20db5eaab87cb7f9e0741b4e50a3a8eaf70c71d4517a2eeb5eca071e9e131e3b21dabf69a4b149ee16c41169e35925d52764a4338aef5313d34d9c0d2dcb20113e0d7be74bf7412bb9a806e2c0d296e59971e1aeba87d49ab072e1860de297fcf648b6d064149af670647d657c61b6e314aeb139969d03f7a77d62507c23586ad128323c71e03a78d500bbfab4eda07e0ed8c99b151de93935f99390421ca43dc8db102c"}, 0xef) (async)
syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:05:46 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg(r6, &(0x7f0000007840)=[{{&(0x7f0000000200)=@in6={0xa, 0x4e23, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4da}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="52485693822a80e80bd354ddbfc90950b12a02252badffbf42565ca640011e783ca3c2cfb01b718faac8ade1639c2e1124f55def80d920c25950703161e4d55b", 0x40}, {&(0x7f00000003c0)="8e3cf1516f7a5aab54099c1c22aecc5c23ca8a48877c721104c4bb5be676e2f0db9bb4605899c37e221b9253719eed5098f8a85a688d84a41d366b512f8ac265655b714c98006b1d3425b56ad26c46c016edc8ce27fdcacee86a5f6975ada2", 0x5f}], 0x2, &(0x7f0000000780)=[{0xe0, 0x3a, 0x9, "6ea3b55a9eec6f0aa6a9e6753bbe84d3112af6a55ab5ee113cef1b2f744a71339dbf20d927d92e102fc5a94f58ea7f9425be8bdf4c689798855db34eb89dae7ae9dd5ce39d5e53ea80036ab656c325ee5a9c46bd666f47dc07d49d2faab5094b1ed16688ffdb2d6b99805868d099935421da0b1ec1bcb159f1074b40acaf8226166a1e41715a8aa03f0b1fd3f72f32d4dbf0b3e614812ec48210782e0e5e3ff7976f11dc2c9142cdc5d29f1b4a4ce66c654c8fa9935d8a075784c65584b4bd11fed1f87f0a29b20c9c15d0c77e822002"}, {0x50, 0xff, 0x400, "bf79d2811e8791a201c0274ce1f473e3c469d430479695f7ab61d7f6bd64c5483f2f66231323998e30b3b25c14f38dc7c1923ef3ac16593952e351faa72a"}, {0xa0, 0x3a, 0x2, "b9e64aa0a5a91aedf728be4c20ba7a7b9892c0182f1d1b02923b625fb08feffb6f5eb077ba1d16faccc8dae43f4cdb0a4868b8824b9d36e8937bfe7044d545f4c1ae43d6c01ddcd9190389745d32b804e39f27604d289ce17eba7879c0c1d600efa3dd23d0a78363e11cc53bbb292903dfe562fcb334a7835f790d0b22c339d1e783166aa20859f0ac38fd8049"}, {0xf0, 0x11, 0x1000, "1456361e8f4fb5d5415c4a4aaee06c9585d3354ea293c830269b41b765c2b12a1ab1312645628d24d9be755cedd9929fa34e2dd288e620dff31196c73ca0c7ec6086f7df14f2b9c235aa5e723075c90dfa8a4c9af613752ae4140bf5d871b0e354e6af919966f231fa3dba872bcea367cd434bc897e61fe82b32e2a111c64f12ac9291b9667a91696161e815faeb046cf2a5d80c530b838879cf21455ea652de10984988f4a679f7b8725e2c321371a6174e109a3a7a9fa9b0bf80c5db4d51238b3726337d0ce0dd11af5726f778f5ccfe4f9d384ba12268873c62"}, {0xd8, 0x119, 0x1ff, "6232d0e3ff1eeafe47846767a86980a0402f5f1d3f3f3804a6b6831c51b069c5808bc2abab3101f8166f6878102aae1172869b4e5295ee8d1c17ace99f6ce40422bac6db4dd738b9e15cef8d22d92b760e529e4185d41be8f1df9ae69ce46512b122c0d7696658eb14d2cdec446fbe86174c3d01e23885fa7eca0c891d93751e9fdcf0b120c6a0ef33035636b42e3d6691e3fdda23e9698d1c394e62d2593ae7df0f7814d714f58ab9e7ddda284e5e25f241571e4cdb422b33d315b9fba6e13b363ad5e414d325"}], 0x398}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)="e22df95d48b31988b2637563c256239153c73485f4506529e0c94479e2d757e1adf9a4729d2adf7441f90a302e5d002d2747108119fff680967ec203da75d6fbf423552f1ab51b8135067e7945f5ac3ded5d424e8305203b1b1951082f2be0", 0x5f}, {&(0x7f0000000b40)="4c64a8ec0fd4481380b38fe82839e62a9eb54faa6bf5d5f8d0aae2536813c970c3e985b7790ff45a9833ee6811505bab13f924bd404adfc5c820ef5fe4c66289c369c24d997090e333ff6a09eb7b942593c8739687b0c3a51a8051ff5a2cb15ba6443a1da716e378cb0ae4357c7b17bb6140505859c7fd7b09316a6620ebb97a1adbf1a63f5077dce1eb3fdebdef1b08205b9c9fca4ec1a54f26be20afaf0f1b0b1f4b46cbbc868309bbcbcc95dec6d55ef49a023b455755ca42a70e1ebb7772b060b8d7f176ef2fdbf10c7490be5b3f6205d38540d9604666fcd6076a5338aacf89503a455526e95cd39c23fdcba26e1b0ea279e14e95a7ad96c7558fe6b88d07f20d04cbfc886c3ddc3f565e5d5bea925e14ff12074c3ddf7f022d2074da099325f1b22bf0eb10f96041926c801f90d2f6ba68b698faf2a11d9b56117bd1fbec425941fc8082e46b7ea40bb1953027094f2c6ef9cb7289f9a267e219162aa5971a63c2e91d9e51c2322c3b9fc711b57d600b156a7f4f9c5928fa715756a78dcab4de91de2de2e56de9cc51030450cc2b3c9bc80fa5a863f0b4b82b232cada21f6d989e8203d3bc231932473e42242dbbe810fd67925d75b60d120180c41b2d6642f1742624afe571039009e078f55f52bfd9ccae066b7ae8c2cee69ddf1d8131a45df2d11b1c8c7939118f03113574e10a5f354f187b8ece79d7e183e0f99ccb64c2bb0294b10a0b6feceae6e3aeec13fb43732dabc5cce61fb497370c56ff5c2f89f3745300576e0edc025a47bceb8aac24e832c26fae14d3d5178e60a475bfedabd6eaec9e786be7124793fed8134a70487a7d1899d3ec9ba9845abb4a7d8cb23b3c4342def33c898b901bff40c85ae7c4cfb8be166efba486944e6837d49f031885255fd9e7d048900bc2b302ba87ee721fdbbdf3ab065c48b117658e1436ee8a3439a088db625bbda4a7b751416a9303204e46a9ee3c75198d74ef9ecb72f505b7134a0a28809b428f7c97807d6eb69b4a3c23a0b917dc6ab1f49af20f3a4365191c26e34d6628a18bd6b8e73ddcce43274093c06cb23759c13e122c41932c512bf1d59c844a9a456cc04ab558906666fe0159e97b4db27e0ba55d565e4dcbd234ea1cdba1bef2944556934bb90530b5c9ccd59a66534416475693f28c75dae7693d59abcb81b0f7d3e330cfbf8461668d2480944b0f323ca22d4c8ce006587413760585d6b02cf208e2b6a5dcdca0b14d43907fbe723eb6ac04f609d3ed4c99efc0a4cf0fcf3c36f2156ef909cb596bce1d1f517b046b9fa18794afeefde0306fa05ea25e29aa67fa47488d9863625c84ffac29827eca3dd7bad15de95bce56ec3eec976b2168b1b95485a51c2b7d0b703763e763507a0d9ae523254a324d477a781f090da2e42d6db645661d4cd50c75bfc489d4021e54c4b8835a07aa756cc62a144fe485e57f98046340e829a329b9bd4f4b53915c9bc630dc781b9b81da8d23b03f5b7eddbc5f839bbca81d2797813b5597c4638cd9312473157d5d632287e4e96113a065d419588c07d396d40f3782b8e77a4558927bb3dccc9a23461d6821d58a9fbbfb1d2285dc389fdb49cba1bf3cd26bf665c42a1539b6020b659426a144e7eecc4f4111f4c0e193801234ccb12f52e3e3a554c453bae4b8f6763056bbbb98bc6217b333a060a7f95e455aad8739328ffad32fc2b591c51a4a9f9ea0c6de9f650b095a59d7fb99b8d01f9e0eab545b920fa7fd00218b5a451f430230cf114bb8ace186d04de8dead39a46c23386bca0f6aeb9545d344599c0cd70a451548a0eb2fc0c3fb7c0ac4c59aae96bb0cd3028b5a9f72f487a22eb2dd2e5b3d03c777ccefd4eb185db05ae6d136cc17b1c36a5737e88fb1f976abf7ec8340b4a71ea3fdec0418afe90cb1f14ba18a631aa555144bfa27122b85cd9b00e800010c1f3d31158ac552c568345d008a441fc20a51d7523906c380db3a866aae7eb5be9bdd905e8aaa1abd60f3bb32c12e61fb3bab3b33e29798a4e64c566e677c71265dfbd494db7837f5227a681a5d0454d65007a7ef9fb9e17f2d40ae52d359d1b30c10e2bbecdb11785b6da1bafcede230459c12a4c2b65e4fe0cf87046a0e5eb27a642acf469a136f1b95259f8a121f50208c4f234b830e64fcd6dc8d69130c81dac9f3b9d2e5dc8d60dcbcff685b0af13fca1eb56d977ecdd9f31f93f09bd4a8a43f24f40c58c6792cbe5a2fe99f92a1eb2bc847fc6ed13c83fb8c3319b04436bad10c3b645645f65f94f8ccf8f8ff7831f2a51c40c9d03344135c67b868b5776a8adbf9ca922c766b6df63f2aa1bd515872ce8eb150f62f3e83cfdfdb1768d00166d0b50f988a5f3d8457ad0230b90b565f411c38bccf8ed2de511e5548134a5d4f4ba007fbef24acb9e32b7e9eff2a0ed8402d26562c13c2bd9daf38c5252a61efc2a20dc13fbdb8cc1bf71d74190d857806487f16f14b2f5d79064e228e2617346962e6d3aa1f31734f9a3836c08d055d48cf230aedce53d38c9ccfe1cedbe8ddef67d67e246e0cf63521e8179b46b469c4c7e8949a6e537a275c9e0921e891a4d62810c66e7a6792c33f31ff472903364ecbf20c7a52d471de9e321a6fa3eca3d7a9ceccbcb91b303430a03de8af00c93bf8d0aa29894ffca0cfd73e0e47181c2265e03c45daf809ae0bfe7374897af6e57a6cbf19cfa41d4b259b67a485c82561a379c9aea789255506abf2c82b3a589db944c091000a3471dbeeb6d7d8ae534b4634e8a6db3fc429f3a9b862b99f719a46c8192775f148b9cc2b80ab1e6740edcaf2791c94481fbe28f45787307b3942fca9d0421bf73e37ca76d333b4eb16d791f29ad4513fea8f3a35af1ecad152674bf97e78906c88e2b716aa5d1d88d9f223485a001048bceee9a123b81ee290cc8e20b8fd51aeba48097bbacaa8569725b0a3fa0df5dbf435234980396785a44999de6f164e49ee962e4e8fb2c18e2e059565067c95e7fa1068b1526a8f303bc6232cdc30b890f7be9d44adbfc379f4820dddad388a660cfb092ae12f4d1237d28ffd5e0a1ecd189c9ea7d31b18c89eeaf1d33239468efe4d34c52e0890b1906c5e114a0631a215586fb7ef2983fd4794020f8ab7f194020169d4ed2f08cb546f8c0f051beaef9c2ce25b5e30cc437a6b65d9f48f92e2e887e36de9d1049036ce9e1ae9a85a1818fe9a405c2889964bef5194342f7f9f4fec39fa2fdf89132d330f4ec228a72f9009e48248fa7b191df36e47e9a3254950b4605615d46bf6c9071879746dc2cee66c27afc64d190ea433d9505f75b51dcab2667e94c850205ddfa5c794463c5355fb8446d7a7519bee062f6c888e48c29988cf640f1db71fd6fe29a053d4d0697497df4a7f2d536d20a29da1504a3cafc619a7b5dff4732c3dbb6ba2781b8b058d6899124bcac1f2e95fe2566bd871b19157ce9deefc1f4f176addfe4e840db86c9d804f34d1f533893a3b2acd042262d646f9aca09f294c393f65ac381306ed34d1d8a7e2354725edba50c954df13f49da72a56cfe8aac229f5d724f3c334b02e0e234b126f9929f2d94768c990317f6e1eaa8d098862e23405331226353ab4102adaf0d2088edd5f7368f7f49e686c5983b39de50299edb464bb886e5e956d031ce0e002333babe393f9929609b6e28c0e607f37f7c95251a1ddaa937a6cf45594283ab149b366f8efd23f9ce68527e290303464a279a3023affaee519fbd1a4509f79c12ca69111fa4683a0631d8d585d3803029e10e43aafc3559fa1f9f7f7cf946180874b0a52ee5e65b06ef77f3ab0b11a4bb350653b823e526dba226047bfa65e4fb08b4d55acd0e47ae46c08c8d54ed2bac40230faac66175b86941920748ba76b63181dcf471c12e4c37912e93efcbad730477ff87db7aed373ac2b903c4efd71e8b049ad1ac90a5d395133fe63d35154a2202a9650ea926ffa3247d8ddd699b68c86aa763614bdc917c93cb57affc81fdbd3e24dec826d13de8d04983cdf12cdb24614591a3db01801417df5e78ac9b106c4717982aee33af022cee1274fbca7c08e1541a23511da131abbe18e8f58193b5de199073d946743161631c712792ee0bc96977182e8510a634c8504a7b44d2d236f982a73bbf1633203f97f0dff511cacb517130023cb55bfc3a95e4d2929d1a8a8e9f7b5f2acecc14c7abff689c19c4e3f6b6befc7e1b67cbbe91724b57b07cf624b7e4c23b84b4ee09fa81fce000e3123d3974eb76298355a32c8296a9bde9056d83aea952e6fc8067b82504784982231dedbd4238745243e835fd93dfa9138c8b48b19188f6bf1bdd07eb2072349d5a964d17bb896915d088dd2897639dfd8bfe9dbe34dd1d005fe0e8d21e2fd6700c19d9db5d74c26d22aabc392affa78756f0a313f30734cb26f8b18339c394b30b64ac1ea77736c7091ed8bb558450aa3c21a75b55c4614c72be6bb7f6160a718bc5402ff3132d0b06f9ae464f87bc8ce70fa52f9f146e678666865e5a9e889d8060392bd09c5a745be1259ff44f61a6efe56f4be939e37491458d198ff73dd37a097bc3651d83114a4ddabf35b2b3a4051796b19d4e0dc87200c8890e6e22199e15c9202ed87d6d8a63ed7ab226c10f26bd297eded595b8f2d2ac729aaf2e6e9e24436a09a0326ef03b72c9d9bfad5fe5eb31d2d42dda9a56cfd29bd29ed85de8d74846f94fcfc73ba921f506dcb267acf56cbe9d63f2aaa7e7c1879f5da52fda70706eec8104be2ee3c0a47f91245e6f93f544c894af9526366fac00397abc1228ad33c9d69c57fb0d25e6a883e5976c70735535972a5b3496ec3256be5cbb41af82e337e7410517ca5e6839e3c338a65a9d66f1210bfd449ab79f732aac2dc278b380211f287646e4ef32f96b0adfa5188b275f8fae87627e66116a6058430b0a08b0598a6b8f32ba3e829b13ad0bed1a8d5509e95ee48456cf025223be7d1d7c2fb536ade43290c25b33dde130591310ccf4ef450b9d9d1264bd7fc3e19c5097fd2bab842181f388b77f1537b9b8fd3d9fa294c87c5736ac3aeb55e38491469c9a2e40ef859658e8322de3931bde82a0cc1a728df4adc1363b2ed507bfd494e67a4834b6e7585dd46a68315d46ba8d5e2f19b1d38d9525e718d52cc913576c5d41377d3ce6f37d5c34038bb95cf7375ada3ebcb085b82502e85668dd21403db9882ede9ead0ae411cf83a5e4bbe8b9ef6dc7c044e790f5f0ac7c881063df427025faebb39e3ea800c3e28f1aa1f31e759ca68765ea4f7ef87818f68e2e1634512732ae9646b7963b29bb95bb1a8464a2656e84cad6de4dae622498a58528c13d3a806836e465ee22ad1e8a1ea0a58cc2abced9a5056aa92720a5d2567eb0c94c4c9d9139c9678eb2b258fce17ad171bfe3d6658f08c2d780a23776431b33b268f104b027e9b695015b60ae199799a8dd5e276c4eb807a71161408c05aca9e44bd0eaf2efeb8f11aeb0fd45a606d681ce65591dca7fea2b0a56f5076fcbd4dec0c828b9f4327dc098a0e294da190932ae20156557d74db35ff806a2541735de8f91d37e8c87c16156f7ef232b34de459a681582d14954e2b5a96ed15b1486692a5e5a48c5031684c6a52c0dac6ec36347c4ee8f8b58c47517acd41c09c6c42bbba9567d23bdd54ca4ef10acec259a86a7a66cc9c8e18b5e727d8079f2766c33f7959d45c5cfeea8ac06ac186bde3b836e943bb1743428f0a5c21039363c731e3042dcedf22b4c4f885a1a10ed3623d94463ac1d4fb12bd5e4c41", 0x1000}], 0x2, &(0x7f00000004c0)=[{0xc8, 0x1, 0x5, "d06034d5b134f084e4fcdfaee1f1c6e1d5403ad946c96a505d89294d5508148d9f2554f31bc6ecfcaa140b0300e7d8891866c20b12742677e8efa00ed4f5c6362d2896c3cc118b9027e636cf1264b692a0b8406d6196b5fa5cccc6104faee2035f57ddb99be2299e69aaa1451733a48f79c85ccf6d2ffc9b4bfd2acdc7a29a7394d1deabc180591e48834102dd66a28fd9d9bc1f520f3cb10a47f322b767ed620a92b288d78f10e1f05ea6616f2dbe2d834fb57edce3c6"}, {0x48, 0x118, 0xffff0001, "535db204b91cf55e23d56b5ef55188ebc7c3b20abb9597fff5fa2ec29c488413adb394ae8aae6ca32c841aa44c7a140984ef36a7500770"}], 0x110}}, {{&(0x7f0000000640)=@sco, 0x80, &(0x7f00000006c0)=[{&(0x7f0000001b40)="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", 0x1000}], 0x1, &(0x7f0000002b40)=[{0x1010, 0x109, 0x2, "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"}, {0x80, 0x107, 0x2, "5b5ef7ccc6cea87e611bb897d5e0574abb724db071e4aeceda5704ef86d50c3611c026bdcff37e4a61d7b25ecd7b68f7f1cc5128e74f1a8840aef52df852d618171291a06b621e204a9e60ad5f6350bf91c6d760df9a635b04c886f643df34acf4bc665127ae399121aeb6ea3a82"}, {0x1010, 0x0, 0x9, "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"}, {0x58, 0x1, 0x1, "2b9c6865d1fddc6ff1d9140d6f9e14dcae2ef0cea0eb27396bfe49846666e86ecff32383e568dde28645323298eba8a30c0467560fd22c9161b4a2ddea91bb6cff6391523560"}, {0x18, 0x10a, 0x5, "d6bd749548e3"}, {0x38, 0x111, 0x80000001, "7a32985a98dddd253228668016876d9c1a3c4104a847c531a2cc73f3ade7f8bd383f9e33"}, {0xf0, 0x108, 0x2, "6b8052429a5a6220324f1b9a154c02fcac12370e5e6942918329122e4ef39ba1329c2dd45b437b3eecd8acd866d9b2a825a4a02cc7019cb18d35e8731f496fc541c3093eeb5cdb1f78d80fe20d5a41848400e6556510e3f4a2b84dd727dfccfdc8d6fe080fb1db25ded2e136b24781958587efc1dba16cac9f08a41c19fd3c5bcb9bebecab6c96ee16f698ffaf0f93d943042184117d789312942844b87f7b6ab5f8b043db8daaa115649a9da1a10c26141b56a486b480edcf7429e919654d8ca080bb8f7bc0a4390e7ab4b2bb4e7004ba20b8e4f77867b73ccfe8430f49fe"}, {0x48, 0x10c, 0xfff, "754c281a0a2793b7f1922ddf7304f69cd07af79b0e7dfc2ddb67fa8e2ed66d3f442ebd9b57a7b932b287bb0111bf8786958b1f074ae728e4"}, {0x1010, 0x112, 0x8001, "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"}], 0x3290}}, {{0x0, 0x0, &(0x7f0000006180)=[{&(0x7f0000005e00)="7861a32e3e48e4ffb1c09ecded16859ddd40c1d101a7db3995201086fb80ea389774997c2aeb11766a69752e74cc51208eca20d70c11d3517eb3e64f55fcda2c42dda73a8f96a90af2ca253e46e9980f81f84632efd3f4439c4de05e53532bf0f91c74ce6eaa618a3696906e88e2cf766e8b9564cac4ddd34a1d6a8d622b23e24990753de2a943963bb6b46752ef7229b10547f8fd057c997f66b99356941b52edde4751f97ce873201a55e33e662fb90bb08c8defd9bc274a4afabc929808aa288cc0", 0xc3}, {&(0x7f0000005f00)="cedf5ebbc13e85bdb2bb9c9c2fa44c5d0b206d68d685da55d4375cf0e9b6d78b34e8429444ddc7ca5ac0d2a19bea4fa04a88107914b9e77b1c6822d49f641ba80f6af0c1835fc2b0194c02f8bc70469bd89d5b411f6d5ae201d8e64d71c534c6ef65d590ffe8e5a27e940691ee690fb36a17e9ccdc28473be61f0c02d75dcfde8b7314d14b198227ac0f57e4d574d7be7f20032b409e4561e8db39a7ff73d3982111f680d4ab400ca082943355f842c8e698472c371106be1a2edc413619e3709397e8e0d21d3afe2af79b37fd375bbe6499bd0e8b7fbdcaca7e66c50c2d3f65c59a470c4e92600c8bf72bc855ef90a66e5e5a", 0xf3}, {&(0x7f0000006000)="1ba7e0f0ef268187327cb849e3586a390b1ac96db6671e341ceddd639f23c5023873552faa392dec4cc3d0439ae3b76568de91f27a7f8190a48f48bf81b374165dedd78995fb43f381fa4644f9bcf0a27fdf418788641ae0", 0x58}, {&(0x7f0000006080)="2c320c5afe3db4d4e67218d6117a742deab200f519e4edf7ea8c97fe696437308f56b5f1ee3e57cdf0d537f780060851963a75e2ffee058d4113e556f34412ffd56923fd436432ea2471", 0x4a}, {&(0x7f0000006100)="bdbbbe31e1a2f82db5cbffc51cfb79001aaed1b6", 0x14}, {&(0x7f0000006140)="d02c2b4537f6", 0x6}], 0x6, &(0x7f0000006200)=[{0xc0, 0x117, 0xffff, "f8fd18422ab6c1114bcf302719142a6dd442718dce04c85664e34dd26956d94c76adf7fc0033a962e7286aa2e58cfc85149f96c39af131a4f5eb3d343bea1e4e7b858b4c4b105002674de5cd652ffd12fe2ca501dd60841819538b17f2ab9d0734f2312bf1c95d50aa53760ef984307ed1c1d07a0c8c0369dad796b37c8ca7e339228933cd3e22908ff379823b87896a13480763d38566a8e8f44be0bcf06f7083a1bc236f86949a52"}, {0x60, 0x10b, 0x0, "d6f5992073239a93b9b999189f9271224721519161104f2fca7a0a6daf16b349729c537cf096ec83c0f47e7fed1d2d6b59af9559197201105210b6a4e5138dc0adc70a14a74731efec73aac04c"}], 0x120}}, {{&(0x7f0000006340)=@l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x1}, 0x80, &(0x7f0000006780)=[{&(0x7f00000063c0)="b24ec5248251aab7484c4e25cc81a4819233523113f37520ca942245a0e2bbd4abaf860e91b96998d88c808a79d12cfc44f25519fa8fb29e6ebcdfa739e3396b1fcb9026994afb6400c042fa4126a5d349e1bc2904cd411f7091b763a55cf9e5d71b857c5b4726b161217beb5d38852fb15b5d7c9709bba9bbb0858705e8fa2d849d04f540d2327d2350b1e806ccadf68453121f1aaab08d09e740ca2e7d09eeeead00ac9fd35c06f2653d58a22698b0f1a69022ad9bd664a34168968b1e00f2aea9bc91f514309300f9e67faffcf1ebc074c865f106f43fe6cddc7f0b1a671af53f08a1307d11f7", 0xe8}, {&(0x7f00000064c0)="996a5d381f2e44409b9583c0669ec885e6a69d00ddd4a875068bd003c49efa218b93fae1da4de539ea957d64be74040a7f076f79d2365d32174d0e6d763b7966d977a7e98b00d7f4be05be6ae97c2ccbd28b362dd9db9cd1ff11f8a8f4c8247ef1f30813618434f6fdfbdbbb89320589995e2573773d9fbb089fb1c53e1fa43a1a4bcdc79bcb64180b90fadeea4b535220e04876b96a9c79abf81c9407f5cb0187ee53cec792b39b17f36c77345b83d4c9025958c5e82ff11a540cdbdc7fd244907582f417e873de7f7d60a3d7137f68a63279bc4b2d7e4e735cd0240932e263f9257f97832d353326a53e1b936785608f67a348d1a8b1e4", 0xf8}, {&(0x7f00000065c0)="c218ae6d6276d1949f3789af635c7ba7cae7ecbe056bbd05f0f1d8c75cdf2d07a50787ef5ae7f6f5ccca57df15251c3e1a7560f1761122807da1cecb642707c2e8be6e095d24f2087fcce3ed01182adbce1a3e458e0d20a896d5ffaa974086eb56291dcc98f3f1691dcfc1a114bcace25291167e4e54d489f0c5af4a58784ea69304d5802b551b03a606ab8fd0cefc15d290d3", 0x93}, {&(0x7f0000006680)="fd07a2724a5273a9c5f992b677ccddcbf20d45baacc0b5743baaba03c4d4733a6a28beee9222da3461eed078f59d7d16f0a72da1a7a559f5e8962b4c6d3636eaec6e67cb326eef39c6a41205f88f6ac6dfb8a96ea68bfbe67d1779e0bab76a69e120ac1c20322b73f8d8bc3ee4186e665b1599cc24bbd1fee29921ccffef3791f4db828ee58a5b032fd8adbc4d2916a89155b6e29869ea0a7a036c4949f085e505f6e77b7313700b394cd21a6f4771250e136c3e169731562dfc01cf8b4a88693e5923750ceb8e32953cd2f4ff36dff86a58c8c51a3f452dc447", 0xda}], 0x4, &(0x7f00000067c0)=[{0x1010, 0x113, 0x2, "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"}, {0x68, 0x10e, 0x9, "b467e8438a3ca90467526f0651af60002c7d0d75f2597f54f670eb56cc5ca7877556d25950c94312c2368c7f661829a85701517e40deb2d94d160f3fc7f0630f90c3bc5493dd3058623ea01d7a22f6bc83"}], 0x1078}}], 0x5, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) (async)
r8 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=<r9=>0x0, &(0x7f0000000100)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000) (async, rerun: 32)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r11}}, 0x1)
syz_io_uring_submit(0x0, r5, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x7, &(0x7f0000000080), 0x1, 0x1, 0x0, {0x0, r11}}, 0x7ff) (async, rerun: 64)
epoll_pwait(0xffffffffffffffff, &(0x7f0000007980)=[{}, {}], 0x2, 0x9, &(0x7f00000079c0)={[0x1]}, 0x8) (async, rerun: 64)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:05:46 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:46 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:46 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x18, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:46 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x18, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:46 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x18, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:46 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
setreuid(0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0xba701, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000f03b0000)
sendfile(0xffffffffffffffff, r1, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@remote, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x80800011})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x34, r5, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}}, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x2, 0x2001e, 0x0)

23:05:46 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000004000)

23:05:46 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:46 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000d, 0x8010, r0, 0x0)
io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x3}}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10)
sendmsg$tipc(r5, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0)
r6 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1)
r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r10}}, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd, 0x7f, {0x0, r5}, 0x9, 0x9, 0x0, {0x0, r10, r4}}, 0x8)
syz_io_uring_submit(0x0, r9, &(0x7f0000000340)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x1, 0x4, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/36, 0x24}, {&(0x7f0000000180)=""/21, 0x15}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/183, 0xb7}], 0x4, 0x1e, 0x1}, 0x7)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:05:46 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000f00)

23:05:47 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_misc(r3, &(0x7f0000000080)=ANY=[], 0x2bb98205)
mmap$IORING_OFF_SQ_RING(&(0x7f000042e000/0x1000)=nil, 0x1000, 0x3, 0x40010, r3, 0x0) (async)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
write$binfmt_misc(r6, &(0x7f0000000180)={'syz1', "c2c3840d065b0bfa7371999f6fcb9c95ed5aa68d1767bb579b9e455fa195699359f14e83f9616b4d2e6f73fb21f1bfaf250e1872be8f44d8470512e29c300e14d748c75235ad7b20db5eaab87cb7f9e0741b4e50a3a8eaf70c71d4517a2eeb5eca071e9e131e3b21dabf69a4b149ee16c41169e35925d52764a4338aef5313d34d9c0d2dcb20113e0d7be74bf7412bb9a806e2c0d296e59971e1aeba87d49ab072e1860de297fcf648b6d064149af670647d657c61b6e314aeb139969d03f7a77d62507c23586ad128323c71e03a78d500bbfab4eda07e0ed8c99b151de93935f99390421ca43dc8db102c"}, 0xef)
syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:05:47 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:47 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000d, 0x8010, r0, 0x0)
io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x3}}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10)
sendmsg$tipc(r5, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0)
r6 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1)
r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r10}}, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd, 0x7f, {0x0, r5}, 0x9, 0x9, 0x0, {0x0, r10, r4}}, 0x8)
syz_io_uring_submit(0x0, r9, &(0x7f0000000340)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x1, 0x4, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/36, 0x24}, {&(0x7f0000000180)=""/21, 0x15}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/183, 0xb7}], 0x4, 0x1e, 0x1}, 0x7)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000d, 0x8010, r0, 0x0) (async)
io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) (async)
bind$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x3}}, 0x10) (async)
socket$tipc(0x1e, 0x2, 0x0) (async)
bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) (async)
sendmsg$tipc(r5, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) (async)
syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async)
syz_io_uring_submit(r7, r8, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r10}}, 0x1) (async)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd, 0x7f, {0x0, r5}, 0x9, 0x9, 0x0, {0x0, r10, r4}}, 0x8) (async)
syz_io_uring_submit(0x0, r9, &(0x7f0000000340)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x1, 0x4, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/36, 0x24}, {&(0x7f0000000180)=""/21, 0x15}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/183, 0xb7}], 0x4, 0x1e, 0x1}, 0x7) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)

23:05:47 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000080000)

23:05:47 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000002000)

23:05:47 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:47 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:47 executing program 1:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000300)

23:05:47 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000d, 0x8010, r0, 0x0) (async)
io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x3}}, 0x10) (async)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) (async)
sendmsg$tipc(r5, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0)
r6 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async)
r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r10}}, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd, 0x7f, {0x0, r5}, 0x9, 0x9, 0x0, {0x0, r10, r4}}, 0x8)
syz_io_uring_submit(0x0, r9, &(0x7f0000000340)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x1, 0x4, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/36, 0x24}, {&(0x7f0000000180)=""/21, 0x15}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/183, 0xb7}], 0x4, 0x1e, 0x1}, 0x7) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:05:47 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:47 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000003f00)

23:05:47 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:48 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:48 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000400000)

23:05:48 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000004000)

23:05:48 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xfffffffd)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_misc(r4, &(0x7f0000000080)=ANY=[], 0x2bb98205)
syz_io_uring_setup(0x45c4, &(0x7f0000000180)={0x0, 0x3a9c, 0x2, 0x2, 0x2e3, 0x0, r4}, &(0x7f000042e000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000200))
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2}, 0x10)
r6 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10)
sendmsg$tipc(r6, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[r6], 0x1)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
r8 = inotify_init1(0x81000)
ioctl$AUTOFS_IOC_CATATONIC(r8, 0x9362, 0x0)
ioctl$BLKIOMIN(r4, 0x1278, &(0x7f0000000240))

23:05:48 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:48 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:48 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:48 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000340)={'macvtap0\x00', @ifru_ivalue=0xbdd})
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10)
sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0)
ioctl$int_in(r2, 0x0, &(0x7f0000000000)=0x9)
close(r0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000001400)={'macvtap0\x00', @ifru_settings={0x3, 0x0, @raw_hdlc=&(0x7f0000000040)={0x5, 0x80}}})

[  152.082598][ T8383] device macvtap0 entered promiscuous mode
23:05:48 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:48 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000340)={'macvtap0\x00', @ifru_ivalue=0xbdd})
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10)
sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0)
ioctl$int_in(r2, 0x0, &(0x7f0000000000)=0x9)
close(r0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000001400)={'macvtap0\x00', @ifru_settings={0x3, 0x0, @raw_hdlc=&(0x7f0000000040)={0x5, 0x80}}})
socket$inet_udp(0x2, 0x2, 0x0) (async)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000340)={'macvtap0\x00', @ifru_ivalue=0xbdd}) (async)
socket$tipc(0x1e, 0x2, 0x0) (async)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) (async)
sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) (async)
socket$tipc(0x1e, 0x2, 0x0) (async)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) (async)
sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) (async)
ioctl$int_in(r2, 0x0, &(0x7f0000000000)=0x9) (async)
close(r0) (async)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000001400)={'macvtap0\x00', @ifru_settings={0x3, 0x0, @raw_hdlc=&(0x7f0000000040)={0x5, 0x80}}}) (async)

23:05:48 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000340)={'macvtap0\x00', @ifru_ivalue=0xbdd}) (async)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) (async)
sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) (async)
sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) (async)
ioctl$int_in(r2, 0x0, &(0x7f0000000000)=0x9)
close(r0) (async)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000001400)={'macvtap0\x00', @ifru_settings={0x3, 0x0, @raw_hdlc=&(0x7f0000000040)={0x5, 0x80}}})

23:05:48 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:48 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0)
syz_io_uring_setup(0xf7e, &(0x7f0000000080)={0x0, 0xc73e, 0x8, 0x2, 0x1f4, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r8=>0x0)
r9 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r9, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10)
sendmsg$tipc(r9, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0)
r10 = accept4$x25(0xffffffffffffffff, &(0x7f0000000200)={0x9, @remote}, &(0x7f0000000240)=0x12, 0x80000)
r11 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2}, 0x10)
r12 = syz_open_pts(0xffffffffffffffff, 0x40)
syz_io_uring_submit(r5, r8, &(0x7f0000000340)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x200, &(0x7f0000000280)=[r4, r0, r9, r0, r10, r11, r12], 0x7}, 0x741)
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:05:48 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000f0ff7f)

23:05:48 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:49 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xfffffffd) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async, rerun: 64)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) (rerun: 64)
write$binfmt_misc(r4, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async)
syz_io_uring_setup(0x45c4, &(0x7f0000000180)={0x0, 0x3a9c, 0x2, 0x2, 0x2e3, 0x0, r4}, &(0x7f000042e000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) (async)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2}, 0x10) (async)
r6 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) (async)
sendmsg$tipc(r6, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[r6], 0x1)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
r8 = inotify_init1(0x81000)
ioctl$AUTOFS_IOC_CATATONIC(r8, 0x9362, 0x0)
ioctl$BLKIOMIN(r4, 0x1278, &(0x7f0000000240))

23:05:49 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000080000)

23:05:49 executing program 1:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000004000)

23:05:49 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:49 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) (async)
syz_io_uring_setup(0xf7e, &(0x7f0000000080)={0x0, 0xc73e, 0x8, 0x2, 0x1f4, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r8=>0x0) (async)
r9 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r9, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) (async)
sendmsg$tipc(r9, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0)
r10 = accept4$x25(0xffffffffffffffff, &(0x7f0000000200)={0x9, @remote}, &(0x7f0000000240)=0x12, 0x80000)
r11 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2}, 0x10)
r12 = syz_open_pts(0xffffffffffffffff, 0x40)
syz_io_uring_submit(r5, r8, &(0x7f0000000340)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x200, &(0x7f0000000280)=[r4, r0, r9, r0, r10, r11, r12], 0x7}, 0x741) (async)
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:05:49 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000f0ffff)

23:05:49 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

[  152.828271][ T8425] validate_nla: 27 callbacks suppressed
[  152.828285][ T8425] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
23:05:49 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

[  152.884997][ T8435] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
23:05:49 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async, rerun: 64)
r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0)
syz_io_uring_setup(0xf7e, &(0x7f0000000080)={0x0, 0xc73e, 0x8, 0x2, 0x1f4, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r8=>0x0)
r9 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r9, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) (async)
sendmsg$tipc(r9, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) (async)
r10 = accept4$x25(0xffffffffffffffff, &(0x7f0000000200)={0x9, @remote}, &(0x7f0000000240)=0x12, 0x80000) (async)
r11 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2}, 0x10)
r12 = syz_open_pts(0xffffffffffffffff, 0x40)
syz_io_uring_submit(r5, r8, &(0x7f0000000340)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x200, &(0x7f0000000280)=[r4, r0, r9, r0, r10, r11, r12], 0x7}, 0x741)
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:05:49 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

[  152.948962][ T8439] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
23:05:49 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

[  153.015469][ T8446] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
23:05:49 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

[  153.082864][ T8450] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  153.149723][ T8453] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
23:05:49 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xfffffffd) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_misc(r4, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async)
syz_io_uring_setup(0x45c4, &(0x7f0000000180)={0x0, 0x3a9c, 0x2, 0x2, 0x2e3, 0x0, r4}, &(0x7f000042e000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) (async)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2}, 0x10)
r6 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10)
sendmsg$tipc(r6, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) (async)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[r6], 0x1) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)
r8 = inotify_init1(0x81000)
ioctl$AUTOFS_IOC_CATATONIC(r8, 0x9362, 0x0) (async)
ioctl$BLKIOMIN(r4, 0x1278, &(0x7f0000000240))

23:05:49 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:49 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000400000)

23:05:49 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f0000001780)={0x0, 0x0, 0x11, 0x2}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/156, 0x9c}, {&(0x7f0000000340)=""/143, 0x8f}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000400)=""/187, 0xbb}, {&(0x7f00000004c0)=""/244, 0xf4}, {&(0x7f00000005c0)=""/199, 0xc7}, {&(0x7f0000000080)=""/17, 0x11}], 0x7)

23:05:49 executing program 1:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb52f21eb3b575c88e0bed22ba0bd2b65c0100180000000000020000000d00000000000000000000000000000000a158b10fe3a9489720ad5c53d0e12e691b8270d6b5339d6d4a9f620eb4acb9594e8706e8f3fa46ec3362c7c2fbbe34808a6a8d3bcd02019bb5ae095da1483e03c57cb7f289bcd1752d3e012e0047469d8cb2049b53afe8acec8b62d0b66aa5e227b29e1eadff69842177a0a77dcdecacacd9d26f4d6300000000000000"], &(0x7f0000001180)=""/4096, 0x26, 0x1000, 0x1}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000580)='syzkaller\x00', 0x2, 0xcc, &(0x7f00000005c0)=""/204, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700), 0x100000}, 0x80)

23:05:49 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000001000000)

23:05:49 executing program 1:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb52f21eb3b575c88e0bed22ba0bd2b65c0100180000000000020000000d00000000000000000000000000000000a158b10fe3a9489720ad5c53d0e12e691b8270d6b5339d6d4a9f620eb4acb9594e8706e8f3fa46ec3362c7c2fbbe34808a6a8d3bcd02019bb5ae095da1483e03c57cb7f289bcd1752d3e012e0047469d8cb2049b53afe8acec8b62d0b66aa5e227b29e1eadff69842177a0a77dcdecacacd9d26f4d6300000000000000"], &(0x7f0000001180)=""/4096, 0x26, 0x1000, 0x1}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000580)='syzkaller\x00', 0x2, 0xcc, &(0x7f00000005c0)=""/204, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700), 0x100000}, 0x80)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb52f21eb3b575c88e0bed22ba0bd2b65c0100180000000000020000000d00000000000000000000000000000000a158b10fe3a9489720ad5c53d0e12e691b8270d6b5339d6d4a9f620eb4acb9594e8706e8f3fa46ec3362c7c2fbbe34808a6a8d3bcd02019bb5ae095da1483e03c57cb7f289bcd1752d3e012e0047469d8cb2049b53afe8acec8b62d0b66aa5e227b29e1eadff69842177a0a77dcdecacacd9d26f4d6300000000000000"], &(0x7f0000001180)=""/4096, 0x26, 0x1000, 0x1}, 0x20) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000580)='syzkaller\x00', 0x2, 0xcc, &(0x7f00000005c0)=""/204, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700), 0x100000}, 0x80) (async)

23:05:49 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f0000001780)={0x0, 0x0, 0x11, 0x2}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/156, 0x9c}, {&(0x7f0000000340)=""/143, 0x8f}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000400)=""/187, 0xbb}, {&(0x7f00000004c0)=""/244, 0xf4}, {&(0x7f00000005c0)=""/199, 0xc7}, {&(0x7f0000000080)=""/17, 0x11}], 0x7)
syz_io_uring_setup(0x5a9, &(0x7f0000001780)={0x0, 0x0, 0x11, 0x2}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/156, 0x9c}, {&(0x7f0000000340)=""/143, 0x8f}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000400)=""/187, 0xbb}, {&(0x7f00000004c0)=""/244, 0xf4}, {&(0x7f00000005c0)=""/199, 0xc7}, {&(0x7f0000000080)=""/17, 0x11}], 0x7) (async)

23:05:49 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

[  153.684159][ T8461] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
23:05:49 executing program 1:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb52f21eb3b575c88e0bed22ba0bd2b65c0100180000000000020000000d00000000000000000000000000000000a158b10fe3a9489720ad5c53d0e12e691b8270d6b5339d6d4a9f620eb4acb9594e8706e8f3fa46ec3362c7c2fbbe34808a6a8d3bcd02019bb5ae095da1483e03c57cb7f289bcd1752d3e012e0047469d8cb2049b53afe8acec8b62d0b66aa5e227b29e1eadff69842177a0a77dcdecacacd9d26f4d6300000000000000"], &(0x7f0000001180)=""/4096, 0x26, 0x1000, 0x1}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000580)='syzkaller\x00', 0x2, 0xcc, &(0x7f00000005c0)=""/204, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700), 0x100000}, 0x80)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb52f21eb3b575c88e0bed22ba0bd2b65c0100180000000000020000000d00000000000000000000000000000000a158b10fe3a9489720ad5c53d0e12e691b8270d6b5339d6d4a9f620eb4acb9594e8706e8f3fa46ec3362c7c2fbbe34808a6a8d3bcd02019bb5ae095da1483e03c57cb7f289bcd1752d3e012e0047469d8cb2049b53afe8acec8b62d0b66aa5e227b29e1eadff69842177a0a77dcdecacacd9d26f4d6300000000000000"], &(0x7f0000001180)=""/4096, 0x26, 0x1000, 0x1}, 0x20) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000580)='syzkaller\x00', 0x2, 0xcc, &(0x7f00000005c0)=""/204, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700), 0x100000}, 0x80) (async)

23:05:49 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f0000001780)={0x0, 0x0, 0x11, 0x2}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/156, 0x9c}, {&(0x7f0000000340)=""/143, 0x8f}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000400)=""/187, 0xbb}, {&(0x7f00000004c0)=""/244, 0xf4}, {&(0x7f00000005c0)=""/199, 0xc7}, {&(0x7f0000000080)=""/17, 0x11}], 0x7)

23:05:50 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

[  153.771619][ T8480] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  153.842870][ T8497] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
23:05:50 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f000042d000/0x4000)=nil, 0x4000, 0xb, 0x0, {0x0, r5}}, 0x8001)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:05:50 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000140)='syzkaller\x00', 0x7, 0xf5, &(0x7f0000000340)=""/238, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff89}, 0x80)

23:05:50 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:50 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x40}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:05:50 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000f0ff7f)

23:05:50 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000003000000)

23:05:50 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000140)='syzkaller\x00', 0x7, 0xf5, &(0x7f0000000340)=""/238, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff89}, 0x80)

23:05:50 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000140)='syzkaller\x00', 0x7, 0xf5, &(0x7f0000000340)=""/238, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff89}, 0x80)

[  154.551256][ T8508] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  154.561801][ T8506] __nla_validate_parse: 2 callbacks suppressed
[  154.561921][ T8506] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
23:05:50 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:50 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$SMC_PNETID_GET(r2, &(0x7f000000ab80)={0x0, 0x0, &(0x7f0000007740)={&(0x7f0000016000)={0x20, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x20, 0x80000000, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000044)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000029c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "1bece178eac64e4ecbc1dd950fe210e7cd1c861b1434be2f1f37afb694acad7531310b08"}}]}]}, 0x64}}, 0x0)

23:05:50 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:50 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$SMC_PNETID_GET(r2, &(0x7f000000ab80)={0x0, 0x0, &(0x7f0000007740)={&(0x7f0000016000)={0x20, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) (async)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x20, 0x80000000, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000044)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000029c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "1bece178eac64e4ecbc1dd950fe210e7cd1c861b1434be2f1f37afb694acad7531310b08"}}]}]}, 0x64}}, 0x0)

[  154.766785][ T8506] syz-executor.2 (8506) used greatest stack depth: 9656 bytes left
23:05:51 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f000042d000/0x4000)=nil, 0x4000, 0xb, 0x0, {0x0, r5}}, 0x8001)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:05:51 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:51 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$SMC_PNETID_GET(r2, &(0x7f000000ab80)={0x0, 0x0, &(0x7f0000007740)={&(0x7f0000016000)={0x20, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) (async)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x20, 0x80000000, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000044)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000029c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "1bece178eac64e4ecbc1dd950fe210e7cd1c861b1434be2f1f37afb694acad7531310b08"}}]}]}, 0x64}}, 0x0)

23:05:51 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0) (async)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x14}}, 0x0) (async, rerun: 32)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (rerun: 32)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x40}}, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

[  154.879368][ T8530] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
23:05:51 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000001000000)

23:05:51 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x661100000f000000)

23:05:51 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:51 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{}, {0x84}, {0x6, 0x0, 0x0, 0x7fff7ffe}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x9, &(0x7f0000000040)=[{0x1, 0x20, 0x5, 0x144}, {0x81, 0x1f, 0x1, 0x3}, {0xf65a, 0x7, 0x80, 0x95a1}, {0xfff8, 0x0, 0x81, 0x10}, {0xbe8, 0x6, 0x20}, {0x0, 0x5, 0x5, 0x5}, {0xa26, 0x0, 0x81, 0x5}, {0x200, 0x16, 0x3, 0x2}, {0x81, 0x0, 0xfa, 0x2}]})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2bb98205)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140))
pipe(&(0x7f00000002c0))
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2}, 0x10)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000001c0)='\x00', 0x0, r2)

23:05:51 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x40}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x14}}, 0x0) (async)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (async)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x40}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)

23:05:51 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f000042d000/0x4000)=nil, 0x4000, 0xb, 0x0, {0x0, r5}}, 0x8001)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f000042d000/0x4000)=nil, 0x4000, 0xb, 0x0, {0x0, r5}}, 0x8001) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)

[  155.167443][ T8554] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
23:05:51 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f000042e000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:05:51 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:51 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:51 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f000042e000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f000042e000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x0) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)

23:05:51 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f00000003c0)='GPL\x00', 0x5, 0xaa, &(0x7f00000004c0)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
syz_io_uring_setup(0x6d38, &(0x7f0000000080)={0x0, 0x5bd8, 0x2, 0x1, 0x3a1, 0x0, r5}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0))

23:05:51 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:51 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000003000000)

23:05:52 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000020000000)

23:05:52 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f000042e000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x0) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 64)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async, rerun: 64)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async, rerun: 64)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (rerun: 64)

23:05:52 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{}, {0x84}, {0x6, 0x0, 0x0, 0x7fff7ffe}]}) (async, rerun: 32)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x9, &(0x7f0000000040)=[{0x1, 0x20, 0x5, 0x144}, {0x81, 0x1f, 0x1, 0x3}, {0xf65a, 0x7, 0x80, 0x95a1}, {0xfff8, 0x0, 0x81, 0x10}, {0xbe8, 0x6, 0x20}, {0x0, 0x5, 0x5, 0x5}, {0xa26, 0x0, 0x81, 0x5}, {0x200, 0x16, 0x3, 0x2}, {0x81, 0x0, 0xfa, 0x2}]}) (rerun: 32)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140)) (async)
pipe(&(0x7f00000002c0)) (async)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2}, 0x10) (async, rerun: 64)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000001c0)='\x00', 0x0, r2) (rerun: 64)

23:05:52 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:52 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042d000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:05:52 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f00000003c0)='GPL\x00', 0x5, 0xaa, &(0x7f00000004c0)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
syz_io_uring_setup(0x6d38, &(0x7f0000000080)={0x0, 0x5bd8, 0x2, 0x1, 0x3a1, 0x0, r5}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0))

23:05:52 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x661100000f000000)

23:05:52 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:52 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042d000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042d000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000080)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)

23:05:52 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:52 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042d000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async, rerun: 32)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) (async, rerun: 32)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:05:52 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:52 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x661100007ffff000)

23:05:52 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:53 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{}, {0x84}, {0x6, 0x0, 0x0, 0x7fff7ffe}]}) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x9, &(0x7f0000000040)=[{0x1, 0x20, 0x5, 0x144}, {0x81, 0x1f, 0x1, 0x3}, {0xf65a, 0x7, 0x80, 0x95a1}, {0xfff8, 0x0, 0x81, 0x10}, {0xbe8, 0x6, 0x20}, {0x0, 0x5, 0x5, 0x5}, {0xa26, 0x0, 0x81, 0x5}, {0x200, 0x16, 0x3, 0x2}, {0x81, 0x0, 0xfa, 0x2}]}) (async)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2bb98205)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140)) (async)
pipe(&(0x7f00000002c0))
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2}, 0x10)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000001c0)='\x00', 0x0, r2)

23:05:53 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f00000003c0)='GPL\x00', 0x5, 0xaa, &(0x7f00000004c0)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async)
syz_io_uring_setup(0x6d38, &(0x7f0000000080)={0x0, 0x5bd8, 0x2, 0x1, 0x3a1, 0x0, r5}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042c000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0))

23:05:53 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000020000000)

23:05:53 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:53 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x100, 0x100}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042f000/0x2000)=nil, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x4000)=nil, 0x4000, 0x1000006, 0x110, r0, 0x10000000)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x77359400}, 0x1, 0x1, 0x1}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f000042e000/0x3000)=nil, 0x3000, 0x1000000, 0x10010, r0, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/class/atm', 0x20000, 0x80)
perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x7f, 0x6, 0x26, 0xff, 0x0, 0x81, 0x10, 0xb, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x8}, 0x2000, 0x80, 0x3, 0x6, 0x80000000, 0x8, 0x400, 0x0, 0x7, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x10, r5, 0x2)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000080)='./file0\x00', 0x40, 0x40000, 0x12345, {0x0, r6}}, 0x7fffffff)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r9}, 0x0)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r8, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd_index=0xa, 0x7fff, 0x0, 0x10000, 0x5, 0x77bf7a2e1d0a26a5, {0x0, r10}}, 0x7)

23:05:53 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x66110000f5ffffff)

23:05:53 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:53 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x100, 0x100}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042f000/0x2000)=nil, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x4000)=nil, 0x4000, 0x1000006, 0x110, r0, 0x10000000) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x77359400}, 0x1, 0x1, 0x1}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f000042e000/0x3000)=nil, 0x3000, 0x1000000, 0x10010, r0, 0x0) (async)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/class/atm', 0x20000, 0x80)
perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x7f, 0x6, 0x26, 0xff, 0x0, 0x81, 0x10, 0xb, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x8}, 0x2000, 0x80, 0x3, 0x6, 0x80000000, 0x8, 0x400, 0x0, 0x7, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x10, r5, 0x2)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000080)='./file0\x00', 0x40, 0x40000, 0x12345, {0x0, r6}}, 0x7fffffff) (async)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r9}, 0x0) (async)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r8, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd_index=0xa, 0x7fff, 0x0, 0x10000, 0x5, 0x77bf7a2e1d0a26a5, {0x0, r10}}, 0x7)

23:05:53 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:53 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x100, 0x100}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042f000/0x2000)=nil, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x4000)=nil, 0x4000, 0x1000006, 0x110, r0, 0x10000000) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x77359400}, 0x1, 0x1, 0x1}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f000042e000/0x3000)=nil, 0x3000, 0x1000000, 0x10010, r0, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/class/atm', 0x20000, 0x80)
perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x7f, 0x6, 0x26, 0xff, 0x0, 0x81, 0x10, 0xb, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x8}, 0x2000, 0x80, 0x3, 0x6, 0x80000000, 0x8, 0x400, 0x0, 0x7, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x10, r5, 0x2) (async)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000080)='./file0\x00', 0x40, 0x40000, 0x12345, {0x0, r6}}, 0x7fffffff) (async)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r9}, 0x0) (async)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r8, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd_index=0xa, 0x7fff, 0x0, 0x10000, 0x5, 0x77bf7a2e1d0a26a5, {0x0, r10}}, 0x7)

23:05:53 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:53 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10)
sendmsg$tipc(r4, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, r4, 0x0, 0x0, 0x0, 0x2, 0x1, {0x3}}, 0x2)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:05:53 executing program 1:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[])
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x400000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000300)='./file0\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0)
link(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00')
sendfile(r0, r1, 0x0, 0xde00)

23:05:53 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:53 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) (async)
sendmsg$tipc(r4, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, r4, 0x0, 0x0, 0x0, 0x2, 0x1, {0x3}}, 0x2)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:05:53 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x10, 0x400}, 0x292)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r10}, 0x0)
pipe(&(0x7f0000000000)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
write$binfmt_misc(r12, &(0x7f0000000080)=ANY=[], 0x2bb98205)
syz_io_uring_submit(r8, r6, &(0x7f0000000380)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r12, &(0x7f0000000280)={0x2, 0x2, 0x2}, &(0x7f0000000340)='./file0/file0\x00', 0x18}, 0x0)
r13 = getpid()
perf_event_open$cgroup(&(0x7f0000000480)={0x4, 0x80, 0x1f, 0x8, 0xfb, 0x5, 0x0, 0x80, 0x28, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000440), 0x3}, 0x50, 0x8337, 0x4, 0x3, 0x6, 0x1, 0x2}, r11, 0x7, r11, 0x7)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1, 0x9, 0x6, 0x5, 0x0, 0x6, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xaa1, 0x2, @perf_config_ext={0x6, 0x400}, 0x4000, 0x2, 0x8, 0x1, 0x100, 0x0, 0x5, 0x0, 0x4, 0x0, 0x7}, r13, 0xe, r11, 0x1)

23:05:53 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x661100003f000000)

23:05:53 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x66110000fffff000)

23:05:53 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)

[  157.756072][ T8728] loop1: detected capacity change from 0 to 262160
23:05:54 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10)
sendmsg$tipc(r4, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, r4, 0x0, 0x0, 0x0, 0x2, 0x1, {0x3}}, 0x2)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socket$tipc(0x1e, 0x2, 0x0) (async)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) (async)
sendmsg$tipc(r4, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, r4, 0x0, 0x0, 0x0, 0x2, 0x1, {0x3}}, 0x2) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)

23:05:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)

23:05:54 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x12a}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r10}, 0x0)
r11 = socket$tipc(0x1e, 0x2, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x2bb98205)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x13, 0xffffffffffffffff, 0x10000000)
setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2}, 0x10)
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r13 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x0)
syz_io_uring_submit(r5, r9, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x1, 0x7, {0x0, r11}, 0x3, 0xe, 0x1, {0x0, r12, r13}}, 0x400)

23:05:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)

23:05:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

23:05:54 executing program 1:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) (async, rerun: 32)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x400000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32)
chdir(&(0x7f0000000300)='./file0\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800) (async, rerun: 32)
lseek(r0, 0x200, 0x0) (async, rerun: 32)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0)
link(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') (async)
sendfile(r0, r1, 0x0, 0xde00)

23:05:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

23:05:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

[  158.302963][ T8761] loop1: detected capacity change from 0 to 262160
[  158.513368][ T8761] loop1: detected capacity change from 0 to 262160
23:05:54 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x10, 0x400}, 0x292)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r10}, 0x0)
pipe(&(0x7f0000000000)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
write$binfmt_misc(r12, &(0x7f0000000080)=ANY=[], 0x2bb98205)
syz_io_uring_submit(r8, r6, &(0x7f0000000380)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r12, &(0x7f0000000280)={0x2, 0x2, 0x2}, &(0x7f0000000340)='./file0/file0\x00', 0x18}, 0x0)
r13 = getpid()
perf_event_open$cgroup(&(0x7f0000000480)={0x4, 0x80, 0x1f, 0x8, 0xfb, 0x5, 0x0, 0x80, 0x28, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000440), 0x3}, 0x50, 0x8337, 0x4, 0x3, 0x6, 0x1, 0x2}, r11, 0x7, r11, 0x7)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1, 0x9, 0x6, 0x5, 0x0, 0x6, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xaa1, 0x2, @perf_config_ext={0x6, 0x400}, 0x4000, 0x2, 0x8, 0x1, 0x100, 0x0, 0x5, 0x0, 0x4, 0x0, 0x7}, r13, 0xe, r11, 0x1)
syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000100)) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) (async)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) (async)
syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x10, 0x400}, 0x292) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600), &(0x7f0000000100)) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) (async)
syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r10}, 0x0) (async)
pipe(&(0x7f0000000000)) (async)
write$binfmt_misc(r12, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async)
syz_io_uring_submit(r8, r6, &(0x7f0000000380)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r12, &(0x7f0000000280)={0x2, 0x2, 0x2}, &(0x7f0000000340)='./file0/file0\x00', 0x18}, 0x0) (async)
getpid() (async)
perf_event_open$cgroup(&(0x7f0000000480)={0x4, 0x80, 0x1f, 0x8, 0xfb, 0x5, 0x0, 0x80, 0x28, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000440), 0x3}, 0x50, 0x8337, 0x4, 0x3, 0x6, 0x1, 0x2}, r11, 0x7, r11, 0x7) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1, 0x9, 0x6, 0x5, 0x0, 0x6, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xaa1, 0x2, @perf_config_ext={0x6, 0x400}, 0x4000, 0x2, 0x8, 0x1, 0x100, 0x0, 0x5, 0x0, 0x4, 0x0, 0x7}, r13, 0xe, r11, 0x1) (async)

23:05:54 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x12a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) (async, rerun: 32)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0) (rerun: 32)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r10}, 0x0)
r11 = socket$tipc(0x1e, 0x2, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async, rerun: 64)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x13, 0xffffffffffffffff, 0x10000000) (async, rerun: 64)
setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2}, 0x10)
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async)
r13 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x0)
syz_io_uring_submit(r5, r9, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x1, 0x7, {0x0, r11}, 0x3, 0xe, 0x1, {0x0, r12, r13}}, 0x400)

23:05:54 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x66110000fffffff5)

23:05:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0)

23:05:54 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x661100007ffff000)

23:05:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0)

23:05:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0)

[  158.662155][ T8761] loop1: detected capacity change from 0 to 262160
23:05:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

[  158.887280][ T8761] loop1: detected capacity change from 0 to 262160
[  159.092429][ T8761] loop1: detected capacity change from 0 to 262160
23:05:55 executing program 1:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[])
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x400000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
chdir(&(0x7f0000000300)='./file0\x00') (async)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800) (async)
lseek(r0, 0x200, 0x0) (async)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0)
link(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') (async)
sendfile(r0, r1, 0x0, 0xde00)

23:05:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:55 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async, rerun: 32)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x12a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0) (async, rerun: 64)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff}) (rerun: 64)
syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r10}, 0x0) (async)
r11 = socket$tipc(0x1e, 0x2, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x13, 0xffffffffffffffff, 0x10000000)
setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2}, 0x10) (async)
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r13 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x0)
syz_io_uring_submit(r5, r9, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x1, 0x7, {0x0, r11}, 0x3, 0xe, 0x1, {0x0, r12, r13}}, 0x400)

[  159.245983][ T8827] loop1: detected capacity change from 0 to 262160
23:05:55 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) (async)
syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x10, 0x400}, 0x292)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r10}, 0x0) (async)
pipe(&(0x7f0000000000)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
write$binfmt_misc(r12, &(0x7f0000000080)=ANY=[], 0x2bb98205)
syz_io_uring_submit(r8, r6, &(0x7f0000000380)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r12, &(0x7f0000000280)={0x2, 0x2, 0x2}, &(0x7f0000000340)='./file0/file0\x00', 0x18}, 0x0) (async)
r13 = getpid()
perf_event_open$cgroup(&(0x7f0000000480)={0x4, 0x80, 0x1f, 0x8, 0xfb, 0x5, 0x0, 0x80, 0x28, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000440), 0x3}, 0x50, 0x8337, 0x4, 0x3, 0x6, 0x1, 0x2}, r11, 0x7, r11, 0x7) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1, 0x9, 0x6, 0x5, 0x0, 0x6, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xaa1, 0x2, @perf_config_ext={0x6, 0x400}, 0x4000, 0x2, 0x8, 0x1, 0x100, 0x0, 0x5, 0x0, 0x4, 0x0, 0x7}, r13, 0xe, r11, 0x1)

23:05:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:55 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x66110000f5ffffff)

23:05:55 executing program 5:
r0 = syz_io_uring_setup(0x4c86, &(0x7f00000002c0)={0x0, 0x3}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042d000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:05:55 executing program 1:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[])
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x400000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000300)='./file0\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
lseek(r0, 0x200, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0)
link(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00')
sendfile(r0, r1, 0x0, 0xde00)

23:05:55 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
io_uring_enter(r0, 0x60c8, 0xe65c, 0x3, &(0x7f0000000340)={[0x9]}, 0x8)
syz_io_uring_setup(0x4637, &(0x7f0000000080)={0x0, 0xf2c6, 0x2, 0x0, 0x2cf, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000042d000/0x3000)=nil, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0))
syz_io_uring_submit(r3, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@llc={0x1a, 0x0, 0x7, 0x3, 0x1c, 0x7, @broadcast}, 0x0, 0x0, 0x1}, 0x40c04600)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:05:55 executing program 5:
r0 = syz_io_uring_setup(0x4c86, &(0x7f00000002c0)={0x0, 0x3}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042d000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0x2, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r4 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:05:55 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
io_uring_enter(r0, 0x60c8, 0xe65c, 0x3, &(0x7f0000000340)={[0x9]}, 0x8)
syz_io_uring_setup(0x4637, &(0x7f0000000080)={0x0, 0xf2c6, 0x2, 0x0, 0x2cf, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000042d000/0x3000)=nil, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0))
syz_io_uring_submit(r3, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@llc={0x1a, 0x0, 0x7, 0x3, 0x1c, 0x7, @broadcast}, 0x0, 0x0, 0x1}, 0x40c04600) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async, rerun: 64)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

[  159.440726][ T8875] loop1: detected capacity change from 0 to 262160
[  159.463244][ T8876] validate_nla: 14 callbacks suppressed
[  159.463258][ T8876] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
23:05:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:05:55 executing program 5:
r0 = syz_io_uring_setup(0x4c86, &(0x7f00000002c0)={0x0, 0x3}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042d000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 64)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async, rerun: 64)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0x2, 0xffffffffffffffff, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:05:55 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
syz_io_uring_setup(0x543a, &(0x7f0000000080)={0x0, 0x3e3d, 0x1, 0x3, 0x1e8, 0x0, r0}, &(0x7f000042d000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0))
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write$binfmt_misc(r8, &(0x7f0000000080)=ANY=[], 0x2bb98205)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x5, 0x0, r8, &(0x7f0000000340), &(0x7f0000000200)='./file0\x00', 0x20, 0x800, 0x0, {0x0, r9}}, 0x5)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

[  159.586178][ T8894] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
23:05:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

[  159.689084][ T8904] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
23:05:56 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000180))
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:05:56 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
io_uring_enter(r0, 0x60c8, 0xe65c, 0x3, &(0x7f0000000340)={[0x9]}, 0x8)
syz_io_uring_setup(0x4637, &(0x7f0000000080)={0x0, 0xf2c6, 0x2, 0x0, 0x2cf, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000042d000/0x3000)=nil, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0))
syz_io_uring_submit(r3, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@llc={0x1a, 0x0, 0x7, 0x3, 0x1c, 0x7, @broadcast}, 0x0, 0x0, 0x1}, 0x40c04600)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async)
io_uring_enter(r0, 0x60c8, 0xe65c, 0x3, &(0x7f0000000340)={[0x9]}, 0x8) (async)
syz_io_uring_setup(0x4637, &(0x7f0000000080)={0x0, 0xf2c6, 0x2, 0x0, 0x2cf, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000042d000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@llc={0x1a, 0x0, 0x7, 0x3, 0x1c, 0x7, @broadcast}, 0x0, 0x0, 0x1}, 0x40c04600) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)

23:05:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0)

23:05:56 executing program 1:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x13, 0x4, @tid=r1}, &(0x7f0000000200)=<r2=>0x0)
clock_gettime(0x0, &(0x7f00000003c0))
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, <r3=>0x0})
perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x1f, 0x0, 0x81, 0x2, 0x0, 0x1, 0x8804, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x8000, 0x3}, 0x0, 0xe374, 0x7fff, 0x6, 0x7, 0xf4, 0x7fff, 0x0, 0x4, 0x0, 0x9}, r3, 0x4, 0xffffffffffffffff, 0x5)
timer_settime(r2, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000240)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x2, 0x7)
socket(0x0, 0xa, 0x8)
timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240))
timer_settime(r2, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f00000002c0))

23:05:56 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x66110000ffffff7f)

23:05:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0)

23:05:56 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_misc(r5, &(0x7f0000000080)=ANY=[], 0x2bb98205)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0x32, 0x1, 0x20, 0x9, 0x0, 0x7, 0x40e00, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x100, 0x4, @perf_bp={&(0x7f0000000080), 0xa}, 0x2000, 0x2, 0x3, 0x5, 0x7f, 0xffffffff, 0x2, 0x0, 0x80, 0x0, 0x1})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_misc(r6, &(0x7f0000000080)=ANY=[], 0x2bb98205)
io_uring_enter(r6, 0x2a71, 0x0, 0x0, 0x0, 0x0)

23:05:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0)

23:05:56 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
syz_io_uring_setup(0x543a, &(0x7f0000000080)={0x0, 0x3e3d, 0x1, 0x3, 0x1e8, 0x0, r0}, &(0x7f000042d000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0)) (async)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) (async)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write$binfmt_misc(r8, &(0x7f0000000080)=ANY=[], 0x2bb98205)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x5, 0x0, r8, &(0x7f0000000340), &(0x7f0000000200)='./file0\x00', 0x20, 0x800, 0x0, {0x0, r9}}, 0x5) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:05:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}]}}}]}, 0x38}}, 0x0)

23:05:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}]}}}]}, 0x38}}, 0x0)

[  160.639224][ T8951] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  160.730686][ T8954] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
23:05:57 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x66110000fffffff5)

23:05:57 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000180))
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async)
ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000180)) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)

23:05:57 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}]}}}]}, 0x38}}, 0x0)

23:05:57 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x38}}, 0x0)

[  160.890281][ T8962] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
23:05:59 executing program 1:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r1 = getpgrp(0x0) (async, rerun: 64)
unshare(0x40000000) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) (rerun: 64)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x13, 0x4, @tid=r1}, &(0x7f0000000200)=<r2=>0x0)
clock_gettime(0x0, &(0x7f00000003c0)) (async, rerun: 64)
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (rerun: 64)
fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, <r3=>0x0})
perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x1f, 0x0, 0x81, 0x2, 0x0, 0x1, 0x8804, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x8000, 0x3}, 0x0, 0xe374, 0x7fff, 0x6, 0x7, 0xf4, 0x7fff, 0x0, 0x4, 0x0, 0x9}, r3, 0x4, 0xffffffffffffffff, 0x5) (async)
timer_settime(r2, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async, rerun: 64)
futex(&(0x7f0000000240)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
socket$inet(0x2, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0) (async, rerun: 32)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) (async, rerun: 32)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x2, 0x7)
socket(0x0, 0xa, 0x8) (async)
timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240))
timer_settime(r2, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f00000002c0))

23:05:59 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x38}}, 0x0)

23:05:59 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000180)) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:05:59 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_misc(r5, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0x32, 0x1, 0x20, 0x9, 0x0, 0x7, 0x40e00, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x100, 0x4, @perf_bp={&(0x7f0000000080), 0xa}, 0x2000, 0x2, 0x3, 0x5, 0x7f, 0xffffffff, 0x2, 0x0, 0x80, 0x0, 0x1})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_misc(r6, &(0x7f0000000080)=ANY=[], 0x2bb98205)
io_uring_enter(r6, 0x2a71, 0x0, 0x0, 0x0, 0x0)

23:05:59 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (rerun: 32)
syz_io_uring_setup(0x543a, &(0x7f0000000080)={0x0, 0x3e3d, 0x1, 0x3, 0x1e8, 0x0, r0}, &(0x7f000042d000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0)) (async)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0) (async, rerun: 64)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff}) (rerun: 64)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) (async)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write$binfmt_misc(r8, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r6, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x5, 0x0, r8, &(0x7f0000000340), &(0x7f0000000200)='./file0\x00', 0x20, 0x800, 0x0, {0x0, r9}}, 0x5)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r10 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:05:59 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x38}}, 0x0)

23:05:59 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r6, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x7, 0x2, &(0x7f0000000080)="1e8f412d408760e11e9f1c4547cc7efd0236130ae6ebb3e4229a598a3cda798ea0589bd5ad3bf06e55847e5718b5e6beeec54848bfa349f1840c8ea56ea1", 0x3, 0x0, 0x1, {0x3, r8}}, 0x46f)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
write$binfmt_misc(r10, &(0x7f0000000080)=ANY=[], 0x2bb98205)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r10, 0x2405, 0xffffffffffffffff)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:05:59 executing program 4:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x13, 0x4, @tid=r1}, &(0x7f0000000200)=<r2=>0x0)
clock_gettime(0x0, &(0x7f00000003c0))
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, <r3=>0x0})
perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x1f, 0x0, 0x81, 0x2, 0x0, 0x1, 0x8804, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x8000, 0x3}, 0x0, 0xe374, 0x7fff, 0x6, 0x7, 0xf4, 0x7fff, 0x0, 0x4, 0x0, 0x9}, r3, 0x4, 0xffffffffffffffff, 0x5)
timer_settime(r2, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000240)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x2, 0x7)
socket(0x0, 0xa, 0x8)
timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240))
timer_settime(r2, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f00000002c0))

23:06:00 executing program 1:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r1 = getpgrp(0x0) (async)
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) (async)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x13, 0x4, @tid=r1}, &(0x7f0000000200)=<r2=>0x0)
clock_gettime(0x0, &(0x7f00000003c0)) (async)
timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async)
fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, <r3=>0x0})
perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x1f, 0x0, 0x81, 0x2, 0x0, 0x1, 0x8804, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x8000, 0x3}, 0x0, 0xe374, 0x7fff, 0x6, 0x7, 0xf4, 0x7fff, 0x0, 0x4, 0x0, 0x9}, r3, 0x4, 0xffffffffffffffff, 0x5) (async)
timer_settime(r2, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
futex(&(0x7f0000000240)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) (async)
socket$inet(0x2, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0) (async)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) (async)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x2, 0x7) (async)
socket(0x0, 0xa, 0x8)
timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000000040)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) (async)
timer_settime(r2, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f00000002c0))

23:06:00 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_misc(r5, &(0x7f0000000080)=ANY=[], 0x2bb98205)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0x32, 0x1, 0x20, 0x9, 0x0, 0x7, 0x40e00, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x100, 0x4, @perf_bp={&(0x7f0000000080), 0xa}, 0x2000, 0x2, 0x3, 0x5, 0x7f, 0xffffffff, 0x2, 0x0, 0x80, 0x0, 0x1})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_misc(r6, &(0x7f0000000080)=ANY=[], 0x2bb98205)
io_uring_enter(r6, 0x2a71, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
pipe(&(0x7f0000000000)) (async)
write$binfmt_misc(r5, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0x32, 0x1, 0x20, 0x9, 0x0, 0x7, 0x40e00, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x100, 0x4, @perf_bp={&(0x7f0000000080), 0xa}, 0x2000, 0x2, 0x3, 0x5, 0x7f, 0xffffffff, 0x2, 0x0, 0x80, 0x0, 0x1}) (async)
pipe(&(0x7f0000000000)) (async)
write$binfmt_misc(r6, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async)
io_uring_enter(r6, 0x2a71, 0x0, 0x0, 0x0, 0x0) (async)

23:06:00 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r6, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x7, 0x2, &(0x7f0000000080)="1e8f412d408760e11e9f1c4547cc7efd0236130ae6ebb3e4229a598a3cda798ea0589bd5ad3bf06e55847e5718b5e6beeec54848bfa349f1840c8ea56ea1", 0x3, 0x0, 0x1, {0x3, r8}}, 0x46f)
r9 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
write$binfmt_misc(r10, &(0x7f0000000080)=ANY=[], 0x2bb98205)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r10, 0x2405, 0xffffffffffffffff) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:00 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)

23:06:00 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)

23:06:00 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x509, 0x80d82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
syz_io_uring_setup(0x2a7f, &(0x7f0000000080)={0x0, 0x4087, 0x2, 0x0, 0x244}, &(0x7f000042c000/0x4000)=nil, &(0x7f000042f000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r5=>0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r6}}, 0x1)
syz_io_uring_submit(0x0, r5, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}, 0x1, 0x0, 0x0, {0x0, r6}}, 0x7fffffff)
r8 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=<r9=>0x0, &(0x7f0000000100)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r11}}, 0x1)
syz_io_uring_submit(r3, r5, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x1, 0x8, 0x0, 0x2, 0x4, 0x1, {0x0, r11}}, 0x4)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:00 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async)

23:06:00 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x509, 0x80d82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
syz_io_uring_setup(0x2a7f, &(0x7f0000000080)={0x0, 0x4087, 0x2, 0x0, 0x244}, &(0x7f000042c000/0x4000)=nil, &(0x7f000042f000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r5=>0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r6}}, 0x1)
syz_io_uring_submit(0x0, r5, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}, 0x1, 0x0, 0x0, {0x0, r6}}, 0x7fffffff)
r8 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=<r9=>0x0, &(0x7f0000000100)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r11}}, 0x1)
syz_io_uring_submit(r3, r5, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x1, 0x8, 0x0, 0x2, 0x4, 0x1, {0x0, r11}}, 0x4)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x509, 0x80d82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
syz_io_uring_setup(0x2a7f, &(0x7f0000000080)={0x0, 0x4087, 0x2, 0x0, 0x244}, &(0x7f000042c000/0x4000)=nil, &(0x7f000042f000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r6}}, 0x1) (async)
syz_io_uring_submit(0x0, r5, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}, 0x1, 0x0, 0x0, {0x0, r6}}, 0x7fffffff) (async)
syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async)
syz_io_uring_submit(r9, r10, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r11}}, 0x1) (async)
syz_io_uring_submit(r3, r5, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x1, 0x8, 0x0, 0x2, 0x4, 0x1, {0x0, r11}}, 0x4) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)

23:06:01 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1db}, &(0x7f000042e000/0x1000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:01 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1db}, &(0x7f000042e000/0x1000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:01 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x509, 0x80d82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
syz_io_uring_setup(0x2a7f, &(0x7f0000000080)={0x0, 0x4087, 0x2, 0x0, 0x244}, &(0x7f000042c000/0x4000)=nil, &(0x7f000042f000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r5=>0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r6}}, 0x1) (async)
syz_io_uring_submit(0x0, r5, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}, 0x1, 0x0, 0x0, {0x0, r6}}, 0x7fffffff) (async)
r8 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=<r9=>0x0, &(0x7f0000000100)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000) (async)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r11}}, 0x1)
syz_io_uring_submit(r3, r5, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x1, 0x8, 0x0, 0x2, 0x4, 0x1, {0x0, r11}}, 0x4) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:02 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0) (fail_nth: 1)

[  166.656684][ T9087] FAULT_INJECTION: forcing a failure.
[  166.656684][ T9087] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  166.669810][ T9087] CPU: 0 PID: 9087 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller-00052-g359303076163-dirty #0
[  166.680755][ T9087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  166.690811][ T9087] Call Trace:
[  166.694087][ T9087]  <TASK>
[  166.697018][ T9087]  dump_stack_lvl+0xd6/0x122
[  166.701652][ T9087]  dump_stack+0x11/0x1b
[  166.705822][ T9087]  should_fail+0x23c/0x250
[  166.710300][ T9087]  should_fail_usercopy+0x16/0x20
[  166.715333][ T9087]  _copy_from_user+0x1c/0xd0
[  166.719941][ T9087]  sendmsg_copy_msghdr+0x60/0x2a0
[  166.724997][ T9087]  __sys_sendmsg+0x166/0x230
[  166.729595][ T9087]  __x64_sys_sendmsg+0x42/0x50
[  166.734360][ T9087]  do_syscall_64+0x44/0xd0
[  166.738813][ T9087]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  166.744720][ T9087] RIP: 0033:0x7f9256a96059
[  166.749217][ T9087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  166.768893][ T9087] RSP: 002b:00007f9255c0c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  166.777329][ T9087] RAX: ffffffffffffffda RBX: 00007f9256ba8f60 RCX: 00007f9256a96059
[  166.785387][ T9087] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005
[  166.793420][ T9087] RBP: 00007f9255c0c1d0 R08: 0000000000000000 R09: 0000000000000000
[  166.801569][ T9087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  166.809544][ T9087] R13: 00007ffd67de0e2f R14: 00007f9255c0c300 R15: 0000000000022000
[  166.817522][ T9087]  </TASK>
23:06:03 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x2, 0x0, 0x0, 0x6}, {0x20}, {0x6, 0x0, 0x40}]}, 0x10)
write(r0, 0x0, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2}, 0x10)
fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x3)

23:06:03 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) (async)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r6, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x7, 0x2, &(0x7f0000000080)="1e8f412d408760e11e9f1c4547cc7efd0236130ae6ebb3e4229a598a3cda798ea0589bd5ad3bf06e55847e5718b5e6beeec54848bfa349f1840c8ea56ea1", 0x3, 0x0, 0x1, {0x3, r8}}, 0x46f) (async)
r9 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
write$binfmt_misc(r10, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r10, 0x2405, 0xffffffffffffffff) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:03 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1db}, &(0x7f000042e000/0x1000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:03 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)=<r4=>0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, r4, 0x2, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = syz_clone3(&(0x7f0000000500)={0x10004800, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000340), {0xa}, &(0x7f0000000380)=""/209, 0xd1, &(0x7f0000000480)=""/32, &(0x7f00000004c0)=[0xffffffffffffffff, 0x0], 0x2}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r11=>r8, @ANYBLOB="89fffeff050000002e2f66696c653000"])
recvmmsg(r11, &(0x7f0000000b00)=[{{&(0x7f0000000680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000780)=""/63, 0x3f}, {&(0x7f00000007c0)=""/10, 0xa}, {&(0x7f0000000800)=""/195, 0xc3}, {&(0x7f0000000900)=""/196, 0xc4}, {&(0x7f0000000a00)=""/13, 0xd}], 0x5, &(0x7f0000000ac0)}, 0x3}], 0x1, 0x10ab63c6cd29dcee, 0x0)
r12 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x8400, 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x7, 0x0, 0x1, 0x5, 0x0, 0x0, 0xe02, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000180), 0x8}, 0x424, 0x100000000, 0x4f9, 0x0, 0x5, 0x3, 0x5, 0x0, 0x365b, 0x0, 0x9}, r10, 0x3, r12, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r9}, 0x0)
r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r7, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x4771dec7406f26b4, 0x0, 0x0, 0x1, {0x0, r13}}, 0x1)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:03 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0) (fail_nth: 2)

23:06:03 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x2, 0x0, 0x0, 0x6}, {0x20}, {0x6, 0x0, 0x40}]}, 0x10)
write(r0, 0x0, 0x0) (async)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2}, 0x10) (async)
fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x3)

[  167.143734][   T24] audit: type=1400 audit(1645052763.334:248): avc:  denied  { setattr } for  pid=9088 comm="syz-executor.1" name="TIPC" dev="sockfs" ino=41451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  167.201405][ T9103] FAULT_INJECTION: forcing a failure.
[  167.201405][ T9103] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  167.214556][ T9103] CPU: 0 PID: 9103 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller-00052-g359303076163-dirty #0
[  167.225504][ T9103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  167.235578][ T9103] Call Trace:
[  167.238965][ T9103]  <TASK>
[  167.241894][ T9103]  dump_stack_lvl+0xd6/0x122
[  167.246494][ T9103]  dump_stack+0x11/0x1b
[  167.250729][ T9103]  should_fail+0x23c/0x250
[  167.255157][ T9103]  should_fail_usercopy+0x16/0x20
[  167.260297][ T9103]  _copy_from_user+0x1c/0xd0
[  167.264892][ T9103]  iovec_from_user+0xc4/0x2e0
[  167.269581][ T9103]  ? terminate_walk+0x263/0x280
[  167.274624][ T9103]  __import_iovec+0x57/0x2d0
[  167.279228][ T9103]  import_iovec+0xb8/0xd0
[  167.283617][ T9103]  sendmsg_copy_msghdr+0x275/0x2a0
[  167.288749][ T9103]  __sys_sendmsg+0x166/0x230
[  167.293389][ T9103]  __x64_sys_sendmsg+0x42/0x50
[  167.298163][ T9103]  do_syscall_64+0x44/0xd0
[  167.302618][ T9103]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  167.308520][ T9103] RIP: 0033:0x7f9256a96059
[  167.312932][ T9103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  167.332616][ T9103] RSP: 002b:00007f9255c0c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  167.341034][ T9103] RAX: ffffffffffffffda RBX: 00007f9256ba8f60 RCX: 00007f9256a96059
23:06:03 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x2, 0xa0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x10a, 0x400000000000004, 0x0, 0x0, 0x0, 0x4000, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
r5 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x919dd1e35b805339, 0x5, 0x10}, 0x18)
io_uring_enter(r5, 0x7b2b, 0x0, 0x1, 0x0, 0x0)

23:06:03 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)=<r4=>0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, r4, 0x2, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = syz_clone3(&(0x7f0000000500)={0x10004800, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000340), {0xa}, &(0x7f0000000380)=""/209, 0xd1, &(0x7f0000000480)=""/32, &(0x7f00000004c0)=[0xffffffffffffffff, 0x0], 0x2}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r11=>r8, @ANYBLOB="89fffeff050000002e2f66696c653000"])
recvmmsg(r11, &(0x7f0000000b00)=[{{&(0x7f0000000680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000780)=""/63, 0x3f}, {&(0x7f00000007c0)=""/10, 0xa}, {&(0x7f0000000800)=""/195, 0xc3}, {&(0x7f0000000900)=""/196, 0xc4}, {&(0x7f0000000a00)=""/13, 0xd}], 0x5, &(0x7f0000000ac0)}, 0x3}], 0x1, 0x10ab63c6cd29dcee, 0x0)
r12 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x8400, 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x7, 0x0, 0x1, 0x5, 0x0, 0x0, 0xe02, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000180), 0x8}, 0x424, 0x100000000, 0x4f9, 0x0, 0x5, 0x3, 0x5, 0x0, 0x365b, 0x0, 0x9}, r10, 0x3, r12, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r9}, 0x0)
r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r7, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x4771dec7406f26b4, 0x0, 0x0, 0x1, {0x0, r13}}, 0x1)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, r4, 0x2, 0xffffffffffffffff, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000100)) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) (async)
syz_clone3(&(0x7f0000000500)={0x10004800, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000340), {0xa}, &(0x7f0000000380)=""/209, 0xd1, &(0x7f0000000480)=""/32, &(0x7f00000004c0)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r8, @ANYBLOB="89fffeff050000002e2f66696c653000"]) (async)
recvmmsg(r11, &(0x7f0000000b00)=[{{&(0x7f0000000680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000780)=""/63, 0x3f}, {&(0x7f00000007c0)=""/10, 0xa}, {&(0x7f0000000800)=""/195, 0xc3}, {&(0x7f0000000900)=""/196, 0xc4}, {&(0x7f0000000a00)=""/13, 0xd}], 0x5, &(0x7f0000000ac0)}, 0x3}], 0x1, 0x10ab63c6cd29dcee, 0x0) (async)
openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x8400, 0x0) (async)
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x7, 0x0, 0x1, 0x5, 0x0, 0x0, 0xe02, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000180), 0x8}, 0x424, 0x100000000, 0x4f9, 0x0, 0x5, 0x3, 0x5, 0x0, 0x365b, 0x0, 0x9}, r10, 0x3, r12, 0x0) (async)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r9}, 0x0) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async)
syz_io_uring_submit(r1, r7, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x4771dec7406f26b4, 0x0, 0x0, 0x1, {0x0, r13}}, 0x1) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)

23:06:03 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x2, 0x0, 0x0, 0x6}, {0x20}, {0x6, 0x0, 0x40}]}, 0x10) (async, rerun: 32)
write(r0, 0x0, 0x0) (async, rerun: 32)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2}, 0x10) (async, rerun: 32)
fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x3) (rerun: 32)

23:06:03 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x2, 0xa0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x10a, 0x400000000000004, 0x0, 0x0, 0x0, 0x4000, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
r5 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x919dd1e35b805339, 0x5, 0x10}, 0x18)
io_uring_enter(r5, 0x7b2b, 0x0, 0x1, 0x0, 0x0)
syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x2, 0xa0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x10a, 0x400000000000004, 0x0, 0x0, 0x0, 0x4000, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xc, 0xffffffffffffffff, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x919dd1e35b805339, 0x5, 0x10}, 0x18) (async)
io_uring_enter(r5, 0x7b2b, 0x0, 0x1, 0x0, 0x0) (async)

[  167.349008][ T9103] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005
[  167.356980][ T9103] RBP: 00007f9255c0c1d0 R08: 0000000000000000 R09: 0000000000000000
[  167.364953][ T9103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  167.372927][ T9103] R13: 00007ffd67de0e2f R14: 00007f9255c0c300 R15: 0000000000022000
[  167.380991][ T9103]  </TASK>
23:06:03 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x2, 0xa0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x10a, 0x400000000000004, 0x0, 0x0, 0x0, 0x4000, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
r5 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x919dd1e35b805339, 0x5, 0x10}, 0x18)
io_uring_enter(r5, 0x7b2b, 0x0, 0x1, 0x0, 0x0)

23:06:03 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000021000000950000000000000000000000000000000000000000000032c09805ba3bc8e528b82cc6ce72f7"], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000080)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2bb98205)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0xd, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200}, [@jmp={0x5, 0x1, 0x3, 0xc, 0xb, 0xffffffffffffffff, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800}, @alu={0x7, 0x1, 0x0, 0x8, 0x3, 0xffffffffffffffc0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0xb8ef}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @exit, @call={0x85, 0x0, 0x0, 0xbe}]}, &(0x7f0000000240)='syzkaller\x00', 0x80, 0xb8, &(0x7f0000000280)=""/184, 0x41100, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x10, 0x200, 0x20}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}, 0x80)

23:06:03 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)=<r4=>0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, r4, 0x2, 0xffffffffffffffff, 0x0) (async)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = syz_clone3(&(0x7f0000000500)={0x10004800, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000340), {0xa}, &(0x7f0000000380)=""/209, 0xd1, &(0x7f0000000480)=""/32, &(0x7f00000004c0)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r11=>r8, @ANYBLOB="89fffeff050000002e2f66696c653000"])
recvmmsg(r11, &(0x7f0000000b00)=[{{&(0x7f0000000680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000780)=""/63, 0x3f}, {&(0x7f00000007c0)=""/10, 0xa}, {&(0x7f0000000800)=""/195, 0xc3}, {&(0x7f0000000900)=""/196, 0xc4}, {&(0x7f0000000a00)=""/13, 0xd}], 0x5, &(0x7f0000000ac0)}, 0x3}], 0x1, 0x10ab63c6cd29dcee, 0x0) (async)
r12 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x8400, 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x7, 0x0, 0x1, 0x5, 0x0, 0x0, 0xe02, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000180), 0x8}, 0x424, 0x100000000, 0x4f9, 0x0, 0x5, 0x3, 0x5, 0x0, 0x365b, 0x0, 0x9}, r10, 0x3, r12, 0x0) (async)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r9}, 0x0) (async)
r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r7, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x4771dec7406f26b4, 0x0, 0x0, 0x1, {0x0, r13}}, 0x1) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:04 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x118, &(0x7f0000000080), 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_misc(r5, &(0x7f0000000080)=ANY=[], 0x2bb98205)
io_uring_enter(r5, 0x3d06, 0x4394, 0x3, &(0x7f00000000c0), 0x8)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:04 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0) (fail_nth: 3)

23:06:04 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0)
syz_io_uring_submit(r1, r6, &(0x7f0000000680)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r4, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)=""/64, 0x40}, {&(0x7f00000001c0)=""/242, 0xf2}, {&(0x7f0000000340)=""/185, 0xb9}, {&(0x7f0000000400)=""/104, 0x68}, {&(0x7f0000000480)=""/194, 0xc2}], 0x5, &(0x7f0000000600)=""/60, 0x3c}, 0x0, 0x1, 0x1, {0x3}}, 0x1)

23:06:04 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0)
r8 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=<r9=>0x0, &(0x7f0000000100)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r11}}, 0x1)
syz_io_uring_submit(r5, r2, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f000042d000/0x4000)=nil, 0x4000, 0xe, 0x0, {0x0, r11}}, 0x7)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

[  168.010548][ T9157] FAULT_INJECTION: forcing a failure.
[  168.010548][ T9157] name failslab, interval 1, probability 0, space 0, times 0
[  168.023257][ T9157] CPU: 1 PID: 9157 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller-00052-g359303076163-dirty #0
[  168.034208][ T9157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  168.044304][ T9157] Call Trace:
[  168.047590][ T9157]  <TASK>
[  168.050524][ T9157]  dump_stack_lvl+0xd6/0x122
[  168.055181][ T9157]  dump_stack+0x11/0x1b
[  168.059357][ T9157]  should_fail+0x23c/0x250
[  168.063789][ T9157]  __should_failslab+0x81/0x90
[  168.068571][ T9157]  should_failslab+0x5/0x20
[  168.073087][ T9157]  kmem_cache_alloc_node+0x61/0x2d0
[  168.078297][ T9157]  ? __alloc_skb+0xf0/0x450
[  168.082811][ T9157]  __alloc_skb+0xf0/0x450
[  168.087149][ T9157]  netlink_sendmsg+0x4fe/0x850
[  168.091949][ T9157]  ? netlink_getsockopt+0x720/0x720
[  168.097236][ T9157]  ____sys_sendmsg+0x39a/0x510
[  168.102025][ T9157]  __sys_sendmsg+0x195/0x230
[  168.106629][ T9157]  __x64_sys_sendmsg+0x42/0x50
[  168.111481][ T9157]  do_syscall_64+0x44/0xd0
[  168.116088][ T9157]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  168.121995][ T9157] RIP: 0033:0x7f9256a96059
[  168.126583][ T9157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  168.146194][ T9157] RSP: 002b:00007f9255c0c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
23:06:04 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0) (fail_nth: 4)

[  168.154612][ T9157] RAX: ffffffffffffffda RBX: 00007f9256ba8f60 RCX: 00007f9256a96059
[  168.162590][ T9157] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005
[  168.170563][ T9157] RBP: 00007f9255c0c1d0 R08: 0000000000000000 R09: 0000000000000000
[  168.178562][ T9157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  168.186584][ T9157] R13: 00007ffd67de0e2f R14: 00007f9255c0c300 R15: 0000000000022000
[  168.194619][ T9157]  </TASK>
[  168.259222][ T9167] FAULT_INJECTION: forcing a failure.
[  168.259222][ T9167] name failslab, interval 1, probability 0, space 0, times 0
[  168.271892][ T9167] CPU: 1 PID: 9167 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller-00052-g359303076163-dirty #0
[  168.282895][ T9167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  168.292983][ T9167] Call Trace:
[  168.296331][ T9167]  <TASK>
[  168.299325][ T9167]  dump_stack_lvl+0xd6/0x122
[  168.303989][ T9167]  dump_stack+0x11/0x1b
[  168.308219][ T9167]  should_fail+0x23c/0x250
[  168.312671][ T9167]  __should_failslab+0x81/0x90
[  168.317494][ T9167]  should_failslab+0x5/0x20
[  168.322029][ T9167]  kmem_cache_alloc_node_trace+0x61/0x310
[  168.327766][ T9167]  ? __kmalloc_node_track_caller+0x30/0x40
[  168.333586][ T9167]  __kmalloc_node_track_caller+0x30/0x40
[  168.339225][ T9167]  ? netlink_sendmsg+0x4fe/0x850
[  168.344210][ T9167]  __alloc_skb+0x19d/0x450
[  168.348756][ T9167]  netlink_sendmsg+0x4fe/0x850
[  168.353573][ T9167]  ? netlink_getsockopt+0x720/0x720
[  168.358785][ T9167]  ____sys_sendmsg+0x39a/0x510
[  168.363683][ T9167]  __sys_sendmsg+0x195/0x230
[  168.368287][ T9167]  __x64_sys_sendmsg+0x42/0x50
[  168.373062][ T9167]  do_syscall_64+0x44/0xd0
[  168.377488][ T9167]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  168.383476][ T9167] RIP: 0033:0x7f9256a96059
[  168.387951][ T9167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
23:06:04 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0)
syz_io_uring_submit(r1, r6, &(0x7f0000000680)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r4, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)=""/64, 0x40}, {&(0x7f00000001c0)=""/242, 0xf2}, {&(0x7f0000000340)=""/185, 0xb9}, {&(0x7f0000000400)=""/104, 0x68}, {&(0x7f0000000480)=""/194, 0xc2}], 0x5, &(0x7f0000000600)=""/60, 0x3c}, 0x0, 0x1, 0x1, {0x3}}, 0x1)
syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000100)) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) (async)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) (async)
syz_io_uring_submit(r1, r6, &(0x7f0000000680)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r4, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)=""/64, 0x40}, {&(0x7f00000001c0)=""/242, 0xf2}, {&(0x7f0000000340)=""/185, 0xb9}, {&(0x7f0000000400)=""/104, 0x68}, {&(0x7f0000000480)=""/194, 0xc2}], 0x5, &(0x7f0000000600)=""/60, 0x3c}, 0x0, 0x1, 0x1, {0x3}}, 0x1) (async)

23:06:04 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000021000000950000000000000000000000000000000000000000000032c09805ba3bc8e528b82cc6ce72f7"], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000080)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2bb98205)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0xd, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200}, [@jmp={0x5, 0x1, 0x3, 0xc, 0xb, 0xffffffffffffffff, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800}, @alu={0x7, 0x1, 0x0, 0x8, 0x3, 0xffffffffffffffc0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0xb8ef}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @exit, @call={0x85, 0x0, 0x0, 0xbe}]}, &(0x7f0000000240)='syzkaller\x00', 0x80, 0xb8, &(0x7f0000000280)=""/184, 0x41100, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x10, 0x200, 0x20}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}, 0x80)

[  168.407561][ T9167] RSP: 002b:00007f9255c0c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  168.416023][ T9167] RAX: ffffffffffffffda RBX: 00007f9256ba8f60 RCX: 00007f9256a96059
[  168.424003][ T9167] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005
[  168.431997][ T9167] RBP: 00007f9255c0c1d0 R08: 0000000000000000 R09: 0000000000000000
[  168.440024][ T9167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  168.448001][ T9167] R13: 00007ffd67de0e2f R14: 00007f9255c0c300 R15: 0000000000022000
[  168.456062][ T9167]  </TASK>
23:06:04 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0) (fail_nth: 5)

[  168.574794][ T9176] FAULT_INJECTION: forcing a failure.
[  168.574794][ T9176] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  168.588310][ T9176] CPU: 1 PID: 9176 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller-00052-g359303076163-dirty #0
[  168.599284][ T9176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  168.609341][ T9176] Call Trace:
[  168.612630][ T9176]  <TASK>
[  168.615564][ T9176]  dump_stack_lvl+0xd6/0x122
[  168.620171][ T9176]  dump_stack+0x11/0x1b
[  168.624406][ T9176]  should_fail+0x23c/0x250
[  168.628831][ T9176]  should_fail_usercopy+0x16/0x20
[  168.633910][ T9176]  _copy_from_iter+0x131/0xa00
[  168.638730][ T9176]  ? check_stack_object+0x61/0x70
[  168.643774][ T9176]  ? __virt_addr_valid+0x15a/0x1a0
[  168.648907][ T9176]  ? __check_object_size+0x22a/0x2d0
[  168.654225][ T9176]  netlink_sendmsg+0x5bb/0x850
[  168.659005][ T9176]  ? netlink_getsockopt+0x720/0x720
[  168.664243][ T9176]  ____sys_sendmsg+0x39a/0x510
[  168.669019][ T9176]  __sys_sendmsg+0x195/0x230
[  168.673625][ T9176]  __x64_sys_sendmsg+0x42/0x50
[  168.678445][ T9176]  do_syscall_64+0x44/0xd0
[  168.682870][ T9176]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  168.688767][ T9176] RIP: 0033:0x7f9256a96059
[  168.693182][ T9176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  168.712896][ T9176] RSP: 002b:00007f9255c0c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  168.721318][ T9176] RAX: ffffffffffffffda RBX: 00007f9256ba8f60 RCX: 00007f9256a96059
[  168.729407][ T9176] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005
[  168.737386][ T9176] RBP: 00007f9255c0c1d0 R08: 0000000000000000 R09: 0000000000000000
[  168.745362][ T9176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  168.753339][ T9176] R13: 00007ffd67de0e2f R14: 00007f9255c0c300 R15: 0000000000022000
[  168.761453][ T9176]  </TASK>
23:06:05 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 64)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (rerun: 64)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r4 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async, rerun: 64)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (rerun: 64)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) (async)
syz_io_uring_submit(r1, r6, &(0x7f0000000680)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r4, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)=""/64, 0x40}, {&(0x7f00000001c0)=""/242, 0xf2}, {&(0x7f0000000340)=""/185, 0xb9}, {&(0x7f0000000400)=""/104, 0x68}, {&(0x7f0000000480)=""/194, 0xc2}], 0x5, &(0x7f0000000600)=""/60, 0x3c}, 0x0, 0x1, 0x1, {0x3}}, 0x1)

23:06:05 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) (async)
r8 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=<r9=>0x0, &(0x7f0000000100)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r11}}, 0x1) (async)
syz_io_uring_submit(r5, r2, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f000042d000/0x4000)=nil, 0x4000, 0xe, 0x0, {0x0, r11}}, 0x7) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:05 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0) (fail_nth: 6)

[  169.036677][ T9203] FAULT_INJECTION: forcing a failure.
[  169.036677][ T9203] name failslab, interval 1, probability 0, space 0, times 0
[  169.049396][ T9203] CPU: 1 PID: 9203 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller-00052-g359303076163-dirty #0
[  169.060363][ T9203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  169.070423][ T9203] Call Trace:
[  169.073715][ T9203]  <TASK>
[  169.076652][ T9203]  dump_stack_lvl+0xd6/0x122
[  169.081254][ T9203]  dump_stack+0x11/0x1b
[  169.085431][ T9203]  should_fail+0x23c/0x250
[  169.089921][ T9203]  ? skb_clone+0x12c/0x1f0
[  169.094380][ T9203]  __should_failslab+0x81/0x90
[  169.099183][ T9203]  should_failslab+0x5/0x20
[  169.104043][ T9203]  kmem_cache_alloc+0x4f/0x320
[  169.108818][ T9203]  skb_clone+0x12c/0x1f0
[  169.113070][ T9203]  netlink_deliver_tap+0x2da/0x510
[  169.118194][ T9203]  netlink_unicast+0x5e4/0x6d0
[  169.123007][ T9203]  netlink_sendmsg+0x728/0x850
[  169.127784][ T9203]  ? netlink_getsockopt+0x720/0x720
[  169.132989][ T9203]  ____sys_sendmsg+0x39a/0x510
[  169.137763][ T9203]  __sys_sendmsg+0x195/0x230
[  169.142381][ T9203]  __x64_sys_sendmsg+0x42/0x50
[  169.147206][ T9203]  do_syscall_64+0x44/0xd0
[  169.151664][ T9203]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  169.157561][ T9203] RIP: 0033:0x7f9256a96059
[  169.162049][ T9203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  169.181806][ T9203] RSP: 002b:00007f9255c0c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  169.190220][ T9203] RAX: ffffffffffffffda RBX: 00007f9256ba8f60 RCX: 00007f9256a96059
[  169.198264][ T9203] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005
[  169.206300][ T9203] RBP: 00007f9255c0c1d0 R08: 0000000000000000 R09: 0000000000000000
[  169.214330][ T9203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  169.222358][ T9203] R13: 00007ffd67de0e2f R14: 00007f9255c0c300 R15: 0000000000022000
[  169.230424][ T9203]  </TASK>
23:06:05 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x118, &(0x7f0000000080), 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_misc(r5, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async)
io_uring_enter(r5, 0x3d06, 0x4394, 0x3, &(0x7f00000000c0), 0x8)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

[  169.236536][ T9203] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
23:06:05 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0) (fail_nth: 7)

[  169.327649][ T9214] FAULT_INJECTION: forcing a failure.
[  169.327649][ T9214] name failslab, interval 1, probability 0, space 0, times 0
[  169.340326][ T9214] CPU: 0 PID: 9214 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller-00052-g359303076163-dirty #0
[  169.351311][ T9214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  169.361373][ T9214] Call Trace:
[  169.364648][ T9214]  <TASK>
[  169.367571][ T9214]  dump_stack_lvl+0xd6/0x122
[  169.372244][ T9214]  dump_stack+0x11/0x1b
[  169.376412][ T9214]  should_fail+0x23c/0x250
[  169.380827][ T9214]  ? rtnl_newlink+0x5b/0x13e0
[  169.385509][ T9214]  __should_failslab+0x81/0x90
[  169.390285][ T9214]  should_failslab+0x5/0x20
[  169.394803][ T9214]  kmem_cache_alloc_trace+0x52/0x350
[  169.400221][ T9214]  rtnl_newlink+0x5b/0x13e0
[  169.404733][ T9214]  ? __rcu_read_unlock+0x5c/0x290
[  169.409759][ T9214]  ? __rcu_read_unlock+0x5c/0x290
[  169.414797][ T9214]  ? avc_has_perm_noaudit+0x1c0/0x270
[  169.420252][ T9214]  ? cred_has_capability+0x10a/0x240
23:06:05 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0)
r8 = syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=<r9=>0x0, &(0x7f0000000100)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r11}}, 0x1)
syz_io_uring_submit(r5, r2, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f000042d000/0x4000)=nil, 0x4000, 0xe, 0x0, {0x0, r11}}, 0x7)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000100)) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) (async)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7}, 0x0) (async)
syz_io_uring_setup(0x685e, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000100)) (async)
syz_io_uring_submit(r9, r10, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r11}}, 0x1) (async)
syz_io_uring_submit(r5, r2, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f000042d000/0x4000)=nil, 0x4000, 0xe, 0x0, {0x0, r11}}, 0x7) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)

23:06:05 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000021000000950000000000000000000000000000000000000000000032c09805ba3bc8e528b82cc6ce72f7"], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000080)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2bb98205)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0xd, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200}, [@jmp={0x5, 0x1, 0x3, 0xc, 0xb, 0xffffffffffffffff, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800}, @alu={0x7, 0x1, 0x0, 0x8, 0x3, 0xffffffffffffffc0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0xb8ef}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @exit, @call={0x85, 0x0, 0x0, 0xbe}]}, &(0x7f0000000240)='syzkaller\x00', 0x80, 0xb8, &(0x7f0000000280)=""/184, 0x41100, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x10, 0x200, 0x20}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000021000000950000000000000000000000000000000000000000000032c09805ba3bc8e528b82cc6ce72f7"], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000080)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async)
pipe(&(0x7f0000000000)) (async)
write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async)
pipe(&(0x7f0000000000)) (async)
write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0xd, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200}, [@jmp={0x5, 0x1, 0x3, 0xc, 0xb, 0xffffffffffffffff, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800}, @alu={0x7, 0x1, 0x0, 0x8, 0x3, 0xffffffffffffffc0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0xb8ef}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @exit, @call={0x85, 0x0, 0x0, 0xbe}]}, &(0x7f0000000240)='syzkaller\x00', 0x80, 0xb8, &(0x7f0000000280)=""/184, 0x41100, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x10, 0x200, 0x20}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}, 0x80) (async)

[  169.425548][ T9214]  ? cred_has_capability+0x1df/0x240
[  169.430847][ T9214]  ? selinux_capable+0x34/0x40
[  169.435621][ T9214]  ? security_capable+0x91/0xa0
[  169.440515][ T9214]  ? __rcu_read_unlock+0x5c/0x290
[  169.445571][ T9214]  ? rtnl_setlink+0x2a0/0x2a0
[  169.450277][ T9214]  rtnetlink_rcv_msg+0x745/0x7e0
[  169.455222][ T9214]  ? ___cache_free+0x46/0x310
[  169.459907][ T9214]  ? kmem_cache_free+0x65/0x110
[  169.464766][ T9214]  ? __kfree_skb+0xfe/0x150
[  169.469439][ T9214]  ? consume_skb+0x48/0x160
[  169.473987][ T9214]  ? nlmon_xmit+0x5f/0x70
[  169.478331][ T9214]  ? __this_cpu_preempt_check+0x18/0x20
[  169.483889][ T9214]  ? __local_bh_enable_ip+0x4d/0x70
[  169.489108][ T9214]  ? local_bh_enable+0x1b/0x20
[  169.493877][ T9214]  ? __dev_queue_xmit+0x59b/0xf90
[  169.498917][ T9214]  ? __skb_clone+0x2db/0x300
[  169.503531][ T9214]  ? __rcu_read_unlock+0x5c/0x290
[  169.508578][ T9214]  netlink_rcv_skb+0x14e/0x250
[  169.513361][ T9214]  ? rtnetlink_bind+0x60/0x60
[  169.518090][ T9214]  rtnetlink_rcv+0x18/0x20
[  169.522605][ T9214]  netlink_unicast+0x602/0x6d0
[  169.527461][ T9214]  netlink_sendmsg+0x728/0x850
[  169.532230][ T9214]  ? netlink_getsockopt+0x720/0x720
[  169.537458][ T9214]  ____sys_sendmsg+0x39a/0x510
[  169.542229][ T9214]  __sys_sendmsg+0x195/0x230
[  169.546828][ T9214]  __x64_sys_sendmsg+0x42/0x50
[  169.551676][ T9214]  do_syscall_64+0x44/0xd0
[  169.556113][ T9214]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  169.562124][ T9214] RIP: 0033:0x7f9256a96059
[  169.566573][ T9214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  169.586210][ T9214] RSP: 002b:00007f9255c0c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  169.594661][ T9214] RAX: ffffffffffffffda RBX: 00007f9256ba8f60 RCX: 00007f9256a96059
[  169.602634][ T9214] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005
[  169.610609][ T9214] RBP: 00007f9255c0c1d0 R08: 0000000000000000 R09: 0000000000000000
[  169.618612][ T9214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
23:06:05 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0) (fail_nth: 8)

[  169.626628][ T9214] R13: 00007ffd67de0e2f R14: 00007f9255c0c300 R15: 0000000000022000
[  169.634621][ T9214]  </TASK>
[  169.724460][ T9222] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  169.732559][ T9222] FAULT_INJECTION: forcing a failure.
[  169.732559][ T9222] name failslab, interval 1, probability 0, space 0, times 0
[  169.745185][ T9222] CPU: 0 PID: 9222 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller-00052-g359303076163-dirty #0
[  169.756122][ T9222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  169.766206][ T9222] Call Trace:
[  169.769483][ T9222]  <TASK>
[  169.772414][ T9222]  dump_stack_lvl+0xd6/0x122
[  169.777063][ T9222]  dump_stack+0x11/0x1b
[  169.781290][ T9222]  should_fail+0x23c/0x250
[  169.785725][ T9222]  __should_failslab+0x81/0x90
[  169.790495][ T9222]  should_failslab+0x5/0x20
[  169.795085][ T9222]  kmem_cache_alloc_node_trace+0x61/0x310
[  169.800869][ T9222]  ? cred_has_capability+0x10a/0x240
[  169.806263][ T9222]  ? cred_has_capability+0x1df/0x240
[  169.811560][ T9222]  ? __kmalloc_node+0x30/0x40
[  169.816254][ T9222]  __kmalloc_node+0x30/0x40
[  169.820826][ T9222]  kvmalloc_node+0x6e/0xe0
[  169.825277][ T9222]  alloc_netdev_mqs+0x86/0x870
[  169.830134][ T9222]  ? tsan.module_ctor+0x10/0x10
[  169.834994][ T9222]  rtnl_create_link+0x22b/0x590
[  169.839885][ T9222]  rtnl_newlink+0xd2c/0x13e0
[  169.844500][ T9222]  ? __rcu_read_unlock+0x5c/0x290
[  169.849536][ T9222]  ? rtnl_setlink+0x2a0/0x2a0
[  169.854215][ T9222]  rtnetlink_rcv_msg+0x745/0x7e0
[  169.859222][ T9222]  ? ___cache_free+0x46/0x310
[  169.863955][ T9222]  ? kmem_cache_free+0x65/0x110
[  169.868883][ T9222]  ? __kfree_skb+0xfe/0x150
[  169.873445][ T9222]  ? consume_skb+0x48/0x160
[  169.877947][ T9222]  ? nlmon_xmit+0x5f/0x70
[  169.882302][ T9222]  ? __this_cpu_preempt_check+0x18/0x20
[  169.887869][ T9222]  ? __local_bh_enable_ip+0x4d/0x70
[  169.893086][ T9222]  ? local_bh_enable+0x1b/0x20
[  169.897867][ T9222]  ? __dev_queue_xmit+0x59b/0xf90
[  169.902904][ T9222]  ? __skb_clone+0x2db/0x300
[  169.907559][ T9222]  ? __rcu_read_unlock+0x5c/0x290
[  169.912648][ T9222]  netlink_rcv_skb+0x14e/0x250
[  169.917415][ T9222]  ? rtnetlink_bind+0x60/0x60
[  169.922280][ T9222]  rtnetlink_rcv+0x18/0x20
[  169.926719][ T9222]  netlink_unicast+0x602/0x6d0
[  169.931496][ T9222]  netlink_sendmsg+0x728/0x850
[  169.936323][ T9222]  ? netlink_getsockopt+0x720/0x720
[  169.941525][ T9222]  ____sys_sendmsg+0x39a/0x510
[  169.946386][ T9222]  __sys_sendmsg+0x195/0x230
[  169.950996][ T9222]  __x64_sys_sendmsg+0x42/0x50
[  169.955768][ T9222]  do_syscall_64+0x44/0xd0
[  169.960237][ T9222]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  169.966142][ T9222] RIP: 0033:0x7f9256a96059
[  169.970561][ T9222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  169.990205][ T9222] RSP: 002b:00007f9255c0c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  169.998624][ T9222] RAX: ffffffffffffffda RBX: 00007f9256ba8f60 RCX: 00007f9256a96059
[  170.007032][ T9222] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005
[  170.015240][ T9222] RBP: 00007f9255c0c1d0 R08: 0000000000000000 R09: 0000000000000000
[  170.023305][ T9222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  170.031278][ T9222] R13: 00007ffd67de0e2f R14: 00007f9255c0c300 R15: 0000000000022000
[  170.039261][ T9222]  </TASK>
[  170.050198][   T24] audit: type=1400 audit(1645052766.244:249): avc:  denied  { rename } for  pid=1421 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
23:06:06 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x118, &(0x7f0000000080), 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_misc(r5, &(0x7f0000000080)=ANY=[], 0x2bb98205)
io_uring_enter(r5, 0x3d06, 0x4394, 0x3, &(0x7f00000000c0), 0x8) (async, rerun: 32)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (rerun: 32)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:06 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0) (fail_nth: 9)

[  170.072424][   T24] audit: type=1400 audit(1645052766.244:250): avc:  denied  { unlink } for  pid=1421 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  170.094827][   T24] audit: type=1400 audit(1645052766.244:251): avc:  denied  { create } for  pid=1421 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  170.175873][ T9247] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  170.195020][ T9247] FAULT_INJECTION: forcing a failure.
[  170.195020][ T9247] name failslab, interval 1, probability 0, space 0, times 0
[  170.208207][ T9247] CPU: 1 PID: 9247 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller-00052-g359303076163-dirty #0
[  170.219162][ T9247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  170.229221][ T9247] Call Trace:
[  170.232502][ T9247]  <TASK>
[  170.235430][ T9247]  dump_stack_lvl+0xd6/0x122
[  170.240058][ T9247]  dump_stack+0x11/0x1b
[  170.244228][ T9247]  should_fail+0x23c/0x250
[  170.248644][ T9247]  ? __hw_addr_add_ex+0x164/0x390
[  170.253756][ T9247]  __should_failslab+0x81/0x90
[  170.258596][ T9247]  should_failslab+0x5/0x20
[  170.263217][ T9247]  kmem_cache_alloc_trace+0x52/0x350
[  170.268515][ T9247]  __hw_addr_add_ex+0x164/0x390
[  170.273456][ T9247]  dev_addr_init+0xae/0x120
[  170.278033][ T9247]  ? mutex_lock+0x9/0x30
[  170.282283][ T9247]  alloc_netdev_mqs+0x195/0x870
[  170.287138][ T9247]  ? tsan.module_ctor+0x10/0x10
[  170.291990][ T9247]  rtnl_create_link+0x22b/0x590
[  170.297000][ T9247]  rtnl_newlink+0xd2c/0x13e0
[  170.301607][ T9247]  ? __rcu_read_unlock+0x5c/0x290
[  170.306740][ T9247]  ? rtnl_setlink+0x2a0/0x2a0
[  170.311499][ T9247]  rtnetlink_rcv_msg+0x745/0x7e0
[  170.316451][ T9247]  ? ___cache_free+0x46/0x310
[  170.321137][ T9247]  ? kmem_cache_free+0x65/0x110
[  170.325994][ T9247]  ? __kfree_skb+0xfe/0x150
[  170.330500][ T9247]  ? consume_skb+0x48/0x160
[  170.335052][ T9247]  ? nlmon_xmit+0x5f/0x70
[  170.339489][ T9247]  ? __this_cpu_preempt_check+0x18/0x20
[  170.345100][ T9247]  ? __local_bh_enable_ip+0x4d/0x70
[  170.350309][ T9247]  ? local_bh_enable+0x1b/0x20
[  170.355178][ T9247]  ? __dev_queue_xmit+0x59b/0xf90
[  170.360226][ T9247]  ? __skb_clone+0x2db/0x300
[  170.364821][ T9247]  ? __rcu_read_unlock+0x5c/0x290
[  170.369932][ T9247]  netlink_rcv_skb+0x14e/0x250
[  170.374774][ T9247]  ? rtnetlink_bind+0x60/0x60
[  170.379459][ T9247]  rtnetlink_rcv+0x18/0x20
[  170.383939][ T9247]  netlink_unicast+0x602/0x6d0
[  170.388877][ T9247]  netlink_sendmsg+0x728/0x850
[  170.393643][ T9247]  ? netlink_getsockopt+0x720/0x720
[  170.398840][ T9247]  ____sys_sendmsg+0x39a/0x510
[  170.403685][ T9247]  __sys_sendmsg+0x195/0x230
[  170.408473][ T9247]  __x64_sys_sendmsg+0x42/0x50
[  170.413241][ T9247]  do_syscall_64+0x44/0xd0
[  170.417663][ T9247]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  170.423632][ T9247] RIP: 0033:0x7f9256a96059
[  170.428323][ T9247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  170.448415][ T9247] RSP: 002b:00007f9255c0c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  170.456839][ T9247] RAX: ffffffffffffffda RBX: 00007f9256ba8f60 RCX: 00007f9256a96059
[  170.464832][ T9247] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005
23:06:06 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000080)=0x80, 0x4)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_misc(r5, &(0x7f0000000080)=ANY=[], 0x2bb98205)
syz_io_uring_setup(0x2575, &(0x7f0000000180)={0x0, 0x517e, 0x0, 0x3, 0x180, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f000042d000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000200))

[  170.472841][ T9247] RBP: 00007f9255c0c1d0 R08: 0000000000000000 R09: 0000000000000000
[  170.480810][ T9247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  170.488784][ T9247] R13: 00007ffd67de0e2f R14: 00007f9255c0c300 R15: 0000000000022000
[  170.496795][ T9247]  </TASK>
23:06:06 executing program 1:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480), 0x600000, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, 0x0)
r2 = syz_clone(0x0, &(0x7f0000000080)="97829a201a768b2754d02aafc5ef384ddbb6ce1a34862671a7d825da395d24b3ed2c66a020276892e064072829616914904c5a0e41c499b4241ece5900be13c527bf34155978ee744ce6f76300525e97b2fc4aa4c07fbc637485f813a23d12c30c13331fb7c652f12fcc1fda80067e88a5c91d9fb0fc82694476c0c6ae2322c723e9ecff9b", 0x85, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180)="31ad9e6cacd6af3d1de7753ca26842d2e74bf14cd6c9e7a24c")
r3 = syz_open_procfs(r2, &(0x7f00000001c0)='net/rpc\x00')
r4 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x6, 0x9, &(0x7f0000000840)=[{&(0x7f0000000240)="292e90b2d2a99c6a2456228eeb904233e37f75b1fd1829a58e37408a632ce516aa51147af2825966a92c9fd015e986873668fe7ecead73174a748905befb53fa4aa504f985d1eb340eb5f0f8f6073a8e48fd7521f0513f5b6d627b21929bc594d2356c965e4bef7d9d1067080a2f5792c5971c514ec5b7b9800a631e49f62355326a9b7a0e833942ba59a19a764695bfc284893db5a2d126fa38e9a484d1aed60771f233d41b014389ba13ccbfa8c46638114a18b71d950e282a9583864746b97d23db", 0xc3, 0x8000}, {&(0x7f0000000340)="dc4ba3914ed1d052dd99a84faf8d53d9c233458d20c536330140d9aa74e1b1417285f1982dba7ef3ca233314a4f9d070914ea7fb63d53a4ee781ad35688dd68915f2488904d7ca958a056f6ff6448818c279d5d51b42a92c3ac197724c12bfd13bf201a7921183f8c85114c6258a4aa818d488d3aca7066fc87b5be8e80cc40e4b8c7eb0378588aada56870c07432e56d6cfe5b6001e1cf90c42e9022db6509037c5335fe1196ab806b678c17aa4f1e1", 0xb0, 0x7fffffff}, {&(0x7f0000000400)="eb6c834bde2b27e389f8835447091f96011b2faaa1d59abea9c39fa7fed353d0e44cf6676ada1e57b8fe848fc29b2f3027482d94efb8d6a00a2fbffb22fdeb0d95bc779c51729daf8e972984597c", 0x4e, 0x6}, {&(0x7f00000004c0)="d0264a54d0b6ccaa0fd677996f7d49a4d218d1c99a88e268b0e8e91f1f01dc7fc4a58e50ae1f5ba1d54aa2f32f6d8c76e68c44c2bc68178e9daf39eaf1a841d8ebc1c0e1686f8e405850121b06b52e975ca9dc3ac90b0a80fe4e6f006841c076ac5b8d4fa285fb6d7f91b16cfa11bc4e667bd6bae49b6522229e8118509a7dec", 0x80, 0x1}, {&(0x7f0000000540)="6c42da65153b7d84f3f1305d65bc426711189a8093cdf6246c8e9165f6daf463aa4a09322ee5aa880fdf6aa643c2f67b3e5755f9df1f1c98e09a9552b42ca2844c7e9eed0e191cd30663b956c692b4b1fd2ef0fc4875c0368b52d5cd5640e954c41862f707c58e7238aa31001fdeab3a8652c0ba193d5b5a73311c5cd6bbf984ba7fb7c318044592ed313a2ac7e4ca164c8b6d9460b54f114e6f9e0a02764d6b37b86f21da1cf4", 0xa7, 0x2}, {&(0x7f0000000600)="5b0f56e3c1dae695baab4c029b9e1121c84904afd10cc08bce21ab2776f373719c2d0b00dc1228a2f0b4ae04dd24af829f6d0e992a453582714141ec35585e9cffd5931d2927fd857c8f2e26604736eb68098b96c8f75dec6999fecfe6790cc10ec775317019a5faa041ecf3e935b8762836173c2d5b44adce8f8d97b8a1503632cdf50b3c5b8d2bf636be4f3569b44f5b967f4eeaff5b68a89a7880c8a75a61ffb9203584032797e86fa3df0ea7e7ad9c619968fe4d0cf555", 0xb9, 0xfffffffffffffffa}, {&(0x7f00000006c0)="8d051cb4a532cdb00e7b0733b34f23e2b1967b581733620804a9dfa5515c443f5fb37cd90288d75a1a1f753d8f06d5e870a76abe4b5ec06444014679b94abd61bb75d2fbf9539e51016522cff1d7df1fc48ace5205bec5f32a7623e954", 0x5d, 0x5}, {&(0x7f0000000740), 0x0, 0x2}, {&(0x7f0000000780)="83102bf89c3dc74153f9b510b389c2116dfd53d7f6f6791c274f7649122e55a1721dc1b1dae7ae4b1e3035f273caf1b4e91ca40dec8cf9a8d0211a33773147dd11dbd6bba73aed297d56b58ac02cc001566f844f9212f33f3440973b7bca45150f4f0444132ea0d9b7c8628ace0cf92608f30db5b0406f33f7fba171888174b8421864b6009f2f8ea725620fe91863146c6294106b0da4ef0473", 0x9a, 0x2}], 0x0, &(0x7f0000000940)={[{@size={'size', 0x3d, [0x70, 0x31, 0x2d, 0x52, 0x70]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x67, 0x32]}}, {@huge_never}, {@mode={'mode', 0x3d, 0x6}}, {@gid={'gid', 0x3d, 0xee01}}, {@mode={'mode', 0x3d, 0x200}}, {@size={'size', 0x3d, [0x33]}}, {@mpol={'mpol', 0x3d, {'local', '', @val={0x3a, [0x37, 0x3a, 0x35, 0x37, 0x31, 0x1a, 0x31]}}}}, {@huge_within_size}], [{@euid_gt}, {@obj_user={'obj_user', 0x3d, '@'}}, {@fsmagic={'fsmagic', 0x3d, 0x422}}]})
renameat(r4, &(0x7f0000000a40)='./file0\x00', r3, &(0x7f0000000a80)='./file0\x00')

23:06:06 executing program 5:
r0 = syz_io_uring_setup(0x113c, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
r5 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r5, r4)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10040, 0x0)
recvfrom$phonet(r6, &(0x7f0000000180)=""/232, 0xe8, 0x12060, &(0x7f00000000c0)={0x23, 0x6, 0x5c, 0xf9}, 0x10)

[  170.593152][ T9255] loop1: detected capacity change from 0 to 264192
[  170.637098][ T9255] tmpfs: Bad value for 'size'
23:06:07 executing program 1:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480), 0x600000, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, 0x0)
r2 = syz_clone(0x0, &(0x7f0000000080)="97829a201a768b2754d02aafc5ef384ddbb6ce1a34862671a7d825da395d24b3ed2c66a020276892e064072829616914904c5a0e41c499b4241ece5900be13c527bf34155978ee744ce6f76300525e97b2fc4aa4c07fbc637485f813a23d12c30c13331fb7c652f12fcc1fda80067e88a5c91d9fb0fc82694476c0c6ae2322c723e9ecff9b", 0x85, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180)="31ad9e6cacd6af3d1de7753ca26842d2e74bf14cd6c9e7a24c")
r3 = syz_open_procfs(r2, &(0x7f00000001c0)='net/rpc\x00')
r4 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x6, 0x9, &(0x7f0000000840)=[{&(0x7f0000000240)="292e90b2d2a99c6a2456228eeb904233e37f75b1fd1829a58e37408a632ce516aa51147af2825966a92c9fd015e986873668fe7ecead73174a748905befb53fa4aa504f985d1eb340eb5f0f8f6073a8e48fd7521f0513f5b6d627b21929bc594d2356c965e4bef7d9d1067080a2f5792c5971c514ec5b7b9800a631e49f62355326a9b7a0e833942ba59a19a764695bfc284893db5a2d126fa38e9a484d1aed60771f233d41b014389ba13ccbfa8c46638114a18b71d950e282a9583864746b97d23db", 0xc3, 0x8000}, {&(0x7f0000000340)="dc4ba3914ed1d052dd99a84faf8d53d9c233458d20c536330140d9aa74e1b1417285f1982dba7ef3ca233314a4f9d070914ea7fb63d53a4ee781ad35688dd68915f2488904d7ca958a056f6ff6448818c279d5d51b42a92c3ac197724c12bfd13bf201a7921183f8c85114c6258a4aa818d488d3aca7066fc87b5be8e80cc40e4b8c7eb0378588aada56870c07432e56d6cfe5b6001e1cf90c42e9022db6509037c5335fe1196ab806b678c17aa4f1e1", 0xb0, 0x7fffffff}, {&(0x7f0000000400)="eb6c834bde2b27e389f8835447091f96011b2faaa1d59abea9c39fa7fed353d0e44cf6676ada1e57b8fe848fc29b2f3027482d94efb8d6a00a2fbffb22fdeb0d95bc779c51729daf8e972984597c", 0x4e, 0x6}, {&(0x7f00000004c0)="d0264a54d0b6ccaa0fd677996f7d49a4d218d1c99a88e268b0e8e91f1f01dc7fc4a58e50ae1f5ba1d54aa2f32f6d8c76e68c44c2bc68178e9daf39eaf1a841d8ebc1c0e1686f8e405850121b06b52e975ca9dc3ac90b0a80fe4e6f006841c076ac5b8d4fa285fb6d7f91b16cfa11bc4e667bd6bae49b6522229e8118509a7dec", 0x80, 0x1}, {&(0x7f0000000540)="6c42da65153b7d84f3f1305d65bc426711189a8093cdf6246c8e9165f6daf463aa4a09322ee5aa880fdf6aa643c2f67b3e5755f9df1f1c98e09a9552b42ca2844c7e9eed0e191cd30663b956c692b4b1fd2ef0fc4875c0368b52d5cd5640e954c41862f707c58e7238aa31001fdeab3a8652c0ba193d5b5a73311c5cd6bbf984ba7fb7c318044592ed313a2ac7e4ca164c8b6d9460b54f114e6f9e0a02764d6b37b86f21da1cf4", 0xa7, 0x2}, {&(0x7f0000000600)="5b0f56e3c1dae695baab4c029b9e1121c84904afd10cc08bce21ab2776f373719c2d0b00dc1228a2f0b4ae04dd24af829f6d0e992a453582714141ec35585e9cffd5931d2927fd857c8f2e26604736eb68098b96c8f75dec6999fecfe6790cc10ec775317019a5faa041ecf3e935b8762836173c2d5b44adce8f8d97b8a1503632cdf50b3c5b8d2bf636be4f3569b44f5b967f4eeaff5b68a89a7880c8a75a61ffb9203584032797e86fa3df0ea7e7ad9c619968fe4d0cf555", 0xb9, 0xfffffffffffffffa}, {&(0x7f00000006c0)="8d051cb4a532cdb00e7b0733b34f23e2b1967b581733620804a9dfa5515c443f5fb37cd90288d75a1a1f753d8f06d5e870a76abe4b5ec06444014679b94abd61bb75d2fbf9539e51016522cff1d7df1fc48ace5205bec5f32a7623e954", 0x5d, 0x5}, {&(0x7f0000000740), 0x0, 0x2}, {&(0x7f0000000780)="83102bf89c3dc74153f9b510b389c2116dfd53d7f6f6791c274f7649122e55a1721dc1b1dae7ae4b1e3035f273caf1b4e91ca40dec8cf9a8d0211a33773147dd11dbd6bba73aed297d56b58ac02cc001566f844f9212f33f3440973b7bca45150f4f0444132ea0d9b7c8628ace0cf92608f30db5b0406f33f7fba171888174b8421864b6009f2f8ea725620fe91863146c6294106b0da4ef0473", 0x9a, 0x2}], 0x0, &(0x7f0000000940)={[{@size={'size', 0x3d, [0x70, 0x31, 0x2d, 0x52, 0x70]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x67, 0x32]}}, {@huge_never}, {@mode={'mode', 0x3d, 0x6}}, {@gid={'gid', 0x3d, 0xee01}}, {@mode={'mode', 0x3d, 0x200}}, {@size={'size', 0x3d, [0x33]}}, {@mpol={'mpol', 0x3d, {'local', '', @val={0x3a, [0x37, 0x3a, 0x35, 0x37, 0x31, 0x1a, 0x31]}}}}, {@huge_within_size}], [{@euid_gt}, {@obj_user={'obj_user', 0x3d, '@'}}, {@fsmagic={'fsmagic', 0x3d, 0x422}}]})
renameat(r4, &(0x7f0000000a40)='./file0\x00', r3, &(0x7f0000000a80)='./file0\x00')
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480), 0x600000, 0x0) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) (async)
getpid() (async)
sched_setscheduler(r0, 0x2, 0x0) (async)
getpid() (async)
sched_setscheduler(r1, 0x5, 0x0) (async)
syz_clone(0x0, &(0x7f0000000080)="97829a201a768b2754d02aafc5ef384ddbb6ce1a34862671a7d825da395d24b3ed2c66a020276892e064072829616914904c5a0e41c499b4241ece5900be13c527bf34155978ee744ce6f76300525e97b2fc4aa4c07fbc637485f813a23d12c30c13331fb7c652f12fcc1fda80067e88a5c91d9fb0fc82694476c0c6ae2322c723e9ecff9b", 0x85, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180)="31ad9e6cacd6af3d1de7753ca26842d2e74bf14cd6c9e7a24c") (async)
syz_open_procfs(r2, &(0x7f00000001c0)='net/rpc\x00') (async)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x6, 0x9, &(0x7f0000000840)=[{&(0x7f0000000240)="292e90b2d2a99c6a2456228eeb904233e37f75b1fd1829a58e37408a632ce516aa51147af2825966a92c9fd015e986873668fe7ecead73174a748905befb53fa4aa504f985d1eb340eb5f0f8f6073a8e48fd7521f0513f5b6d627b21929bc594d2356c965e4bef7d9d1067080a2f5792c5971c514ec5b7b9800a631e49f62355326a9b7a0e833942ba59a19a764695bfc284893db5a2d126fa38e9a484d1aed60771f233d41b014389ba13ccbfa8c46638114a18b71d950e282a9583864746b97d23db", 0xc3, 0x8000}, {&(0x7f0000000340)="dc4ba3914ed1d052dd99a84faf8d53d9c233458d20c536330140d9aa74e1b1417285f1982dba7ef3ca233314a4f9d070914ea7fb63d53a4ee781ad35688dd68915f2488904d7ca958a056f6ff6448818c279d5d51b42a92c3ac197724c12bfd13bf201a7921183f8c85114c6258a4aa818d488d3aca7066fc87b5be8e80cc40e4b8c7eb0378588aada56870c07432e56d6cfe5b6001e1cf90c42e9022db6509037c5335fe1196ab806b678c17aa4f1e1", 0xb0, 0x7fffffff}, {&(0x7f0000000400)="eb6c834bde2b27e389f8835447091f96011b2faaa1d59abea9c39fa7fed353d0e44cf6676ada1e57b8fe848fc29b2f3027482d94efb8d6a00a2fbffb22fdeb0d95bc779c51729daf8e972984597c", 0x4e, 0x6}, {&(0x7f00000004c0)="d0264a54d0b6ccaa0fd677996f7d49a4d218d1c99a88e268b0e8e91f1f01dc7fc4a58e50ae1f5ba1d54aa2f32f6d8c76e68c44c2bc68178e9daf39eaf1a841d8ebc1c0e1686f8e405850121b06b52e975ca9dc3ac90b0a80fe4e6f006841c076ac5b8d4fa285fb6d7f91b16cfa11bc4e667bd6bae49b6522229e8118509a7dec", 0x80, 0x1}, {&(0x7f0000000540)="6c42da65153b7d84f3f1305d65bc426711189a8093cdf6246c8e9165f6daf463aa4a09322ee5aa880fdf6aa643c2f67b3e5755f9df1f1c98e09a9552b42ca2844c7e9eed0e191cd30663b956c692b4b1fd2ef0fc4875c0368b52d5cd5640e954c41862f707c58e7238aa31001fdeab3a8652c0ba193d5b5a73311c5cd6bbf984ba7fb7c318044592ed313a2ac7e4ca164c8b6d9460b54f114e6f9e0a02764d6b37b86f21da1cf4", 0xa7, 0x2}, {&(0x7f0000000600)="5b0f56e3c1dae695baab4c029b9e1121c84904afd10cc08bce21ab2776f373719c2d0b00dc1228a2f0b4ae04dd24af829f6d0e992a453582714141ec35585e9cffd5931d2927fd857c8f2e26604736eb68098b96c8f75dec6999fecfe6790cc10ec775317019a5faa041ecf3e935b8762836173c2d5b44adce8f8d97b8a1503632cdf50b3c5b8d2bf636be4f3569b44f5b967f4eeaff5b68a89a7880c8a75a61ffb9203584032797e86fa3df0ea7e7ad9c619968fe4d0cf555", 0xb9, 0xfffffffffffffffa}, {&(0x7f00000006c0)="8d051cb4a532cdb00e7b0733b34f23e2b1967b581733620804a9dfa5515c443f5fb37cd90288d75a1a1f753d8f06d5e870a76abe4b5ec06444014679b94abd61bb75d2fbf9539e51016522cff1d7df1fc48ace5205bec5f32a7623e954", 0x5d, 0x5}, {&(0x7f0000000740), 0x0, 0x2}, {&(0x7f0000000780)="83102bf89c3dc74153f9b510b389c2116dfd53d7f6f6791c274f7649122e55a1721dc1b1dae7ae4b1e3035f273caf1b4e91ca40dec8cf9a8d0211a33773147dd11dbd6bba73aed297d56b58ac02cc001566f844f9212f33f3440973b7bca45150f4f0444132ea0d9b7c8628ace0cf92608f30db5b0406f33f7fba171888174b8421864b6009f2f8ea725620fe91863146c6294106b0da4ef0473", 0x9a, 0x2}], 0x0, &(0x7f0000000940)={[{@size={'size', 0x3d, [0x70, 0x31, 0x2d, 0x52, 0x70]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x67, 0x32]}}, {@huge_never}, {@mode={'mode', 0x3d, 0x6}}, {@gid={'gid', 0x3d, 0xee01}}, {@mode={'mode', 0x3d, 0x200}}, {@size={'size', 0x3d, [0x33]}}, {@mpol={'mpol', 0x3d, {'local', '', @val={0x3a, [0x37, 0x3a, 0x35, 0x37, 0x31, 0x1a, 0x31]}}}}, {@huge_within_size}], [{@euid_gt}, {@obj_user={'obj_user', 0x3d, '@'}}, {@fsmagic={'fsmagic', 0x3d, 0x422}}]}) (async)
renameat(r4, &(0x7f0000000a40)='./file0\x00', r3, &(0x7f0000000a80)='./file0\x00') (async)

23:06:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0) (fail_nth: 10)

[  170.816215][ T9265] loop1: detected capacity change from 0 to 264192
[  170.846235][ T9265] tmpfs: Bad value for 'size'
23:06:07 executing program 1:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480), 0x600000, 0x0) (async, rerun: 64)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) (async, rerun: 64)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0) (async)
r1 = getpid()
sched_setscheduler(r1, 0x5, 0x0)
r2 = syz_clone(0x0, &(0x7f0000000080)="97829a201a768b2754d02aafc5ef384ddbb6ce1a34862671a7d825da395d24b3ed2c66a020276892e064072829616914904c5a0e41c499b4241ece5900be13c527bf34155978ee744ce6f76300525e97b2fc4aa4c07fbc637485f813a23d12c30c13331fb7c652f12fcc1fda80067e88a5c91d9fb0fc82694476c0c6ae2322c723e9ecff9b", 0x85, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180)="31ad9e6cacd6af3d1de7753ca26842d2e74bf14cd6c9e7a24c")
r3 = syz_open_procfs(r2, &(0x7f00000001c0)='net/rpc\x00')
r4 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x6, 0x9, &(0x7f0000000840)=[{&(0x7f0000000240)="292e90b2d2a99c6a2456228eeb904233e37f75b1fd1829a58e37408a632ce516aa51147af2825966a92c9fd015e986873668fe7ecead73174a748905befb53fa4aa504f985d1eb340eb5f0f8f6073a8e48fd7521f0513f5b6d627b21929bc594d2356c965e4bef7d9d1067080a2f5792c5971c514ec5b7b9800a631e49f62355326a9b7a0e833942ba59a19a764695bfc284893db5a2d126fa38e9a484d1aed60771f233d41b014389ba13ccbfa8c46638114a18b71d950e282a9583864746b97d23db", 0xc3, 0x8000}, {&(0x7f0000000340)="dc4ba3914ed1d052dd99a84faf8d53d9c233458d20c536330140d9aa74e1b1417285f1982dba7ef3ca233314a4f9d070914ea7fb63d53a4ee781ad35688dd68915f2488904d7ca958a056f6ff6448818c279d5d51b42a92c3ac197724c12bfd13bf201a7921183f8c85114c6258a4aa818d488d3aca7066fc87b5be8e80cc40e4b8c7eb0378588aada56870c07432e56d6cfe5b6001e1cf90c42e9022db6509037c5335fe1196ab806b678c17aa4f1e1", 0xb0, 0x7fffffff}, {&(0x7f0000000400)="eb6c834bde2b27e389f8835447091f96011b2faaa1d59abea9c39fa7fed353d0e44cf6676ada1e57b8fe848fc29b2f3027482d94efb8d6a00a2fbffb22fdeb0d95bc779c51729daf8e972984597c", 0x4e, 0x6}, {&(0x7f00000004c0)="d0264a54d0b6ccaa0fd677996f7d49a4d218d1c99a88e268b0e8e91f1f01dc7fc4a58e50ae1f5ba1d54aa2f32f6d8c76e68c44c2bc68178e9daf39eaf1a841d8ebc1c0e1686f8e405850121b06b52e975ca9dc3ac90b0a80fe4e6f006841c076ac5b8d4fa285fb6d7f91b16cfa11bc4e667bd6bae49b6522229e8118509a7dec", 0x80, 0x1}, {&(0x7f0000000540)="6c42da65153b7d84f3f1305d65bc426711189a8093cdf6246c8e9165f6daf463aa4a09322ee5aa880fdf6aa643c2f67b3e5755f9df1f1c98e09a9552b42ca2844c7e9eed0e191cd30663b956c692b4b1fd2ef0fc4875c0368b52d5cd5640e954c41862f707c58e7238aa31001fdeab3a8652c0ba193d5b5a73311c5cd6bbf984ba7fb7c318044592ed313a2ac7e4ca164c8b6d9460b54f114e6f9e0a02764d6b37b86f21da1cf4", 0xa7, 0x2}, {&(0x7f0000000600)="5b0f56e3c1dae695baab4c029b9e1121c84904afd10cc08bce21ab2776f373719c2d0b00dc1228a2f0b4ae04dd24af829f6d0e992a453582714141ec35585e9cffd5931d2927fd857c8f2e26604736eb68098b96c8f75dec6999fecfe6790cc10ec775317019a5faa041ecf3e935b8762836173c2d5b44adce8f8d97b8a1503632cdf50b3c5b8d2bf636be4f3569b44f5b967f4eeaff5b68a89a7880c8a75a61ffb9203584032797e86fa3df0ea7e7ad9c619968fe4d0cf555", 0xb9, 0xfffffffffffffffa}, {&(0x7f00000006c0)="8d051cb4a532cdb00e7b0733b34f23e2b1967b581733620804a9dfa5515c443f5fb37cd90288d75a1a1f753d8f06d5e870a76abe4b5ec06444014679b94abd61bb75d2fbf9539e51016522cff1d7df1fc48ace5205bec5f32a7623e954", 0x5d, 0x5}, {&(0x7f0000000740), 0x0, 0x2}, {&(0x7f0000000780)="83102bf89c3dc74153f9b510b389c2116dfd53d7f6f6791c274f7649122e55a1721dc1b1dae7ae4b1e3035f273caf1b4e91ca40dec8cf9a8d0211a33773147dd11dbd6bba73aed297d56b58ac02cc001566f844f9212f33f3440973b7bca45150f4f0444132ea0d9b7c8628ace0cf92608f30db5b0406f33f7fba171888174b8421864b6009f2f8ea725620fe91863146c6294106b0da4ef0473", 0x9a, 0x2}], 0x0, &(0x7f0000000940)={[{@size={'size', 0x3d, [0x70, 0x31, 0x2d, 0x52, 0x70]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x67, 0x32]}}, {@huge_never}, {@mode={'mode', 0x3d, 0x6}}, {@gid={'gid', 0x3d, 0xee01}}, {@mode={'mode', 0x3d, 0x200}}, {@size={'size', 0x3d, [0x33]}}, {@mpol={'mpol', 0x3d, {'local', '', @val={0x3a, [0x37, 0x3a, 0x35, 0x37, 0x31, 0x1a, 0x31]}}}}, {@huge_within_size}], [{@euid_gt}, {@obj_user={'obj_user', 0x3d, '@'}}, {@fsmagic={'fsmagic', 0x3d, 0x422}}]})
renameat(r4, &(0x7f0000000a40)='./file0\x00', r3, &(0x7f0000000a80)='./file0\x00')

[  170.913267][ T9268] loop1: detected capacity change from 0 to 264192
23:06:07 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

[  170.990855][ T9275] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  171.026943][ T9278] loop1: detected capacity change from 0 to 264192
[  171.073910][ T9275] FAULT_INJECTION: forcing a failure.
[  171.073910][ T9275] name failslab, interval 1, probability 0, space 0, times 0
[  171.086573][ T9275] CPU: 1 PID: 9275 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller-00052-g359303076163-dirty #0
[  171.096015][ T9278] tmpfs: Bad value for 'size'
[  171.097502][ T9275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  171.097516][ T9275] Call Trace:
[  171.097523][ T9275]  <TASK>
[  171.118408][ T9275]  dump_stack_lvl+0xd6/0x122
[  171.123008][ T9275]  dump_stack+0x11/0x1b
[  171.127279][ T9275]  should_fail+0x23c/0x250
[  171.131695][ T9275]  __should_failslab+0x81/0x90
[  171.136457][ T9275]  should_failslab+0x5/0x20
[  171.141006][ T9275]  kmem_cache_alloc_node_trace+0x61/0x310
[  171.146766][ T9275]  ? __kmalloc_node+0x30/0x40
[  171.151430][ T9275]  __kmalloc_node+0x30/0x40
[  171.155921][ T9275]  kvmalloc_node+0x6e/0xe0
[  171.160375][ T9275]  alloc_netdev_mqs+0x4e0/0x870
[  171.165272][ T9275]  ? tsan.module_ctor+0x10/0x10
[  171.170109][ T9275]  rtnl_create_link+0x22b/0x590
[  171.174978][ T9275]  rtnl_newlink+0xd2c/0x13e0
[  171.179568][ T9275]  ? __rcu_read_unlock+0x5c/0x290
[  171.184610][ T9275]  ? rtnl_setlink+0x2a0/0x2a0
[  171.189272][ T9275]  rtnetlink_rcv_msg+0x745/0x7e0
[  171.194646][ T9275]  ? ___cache_free+0x46/0x310
[  171.199324][ T9275]  ? kmem_cache_free+0x65/0x110
[  171.204214][ T9275]  ? __kfree_skb+0xfe/0x150
[  171.208706][ T9275]  ? consume_skb+0x48/0x160
[  171.213302][ T9275]  ? nlmon_xmit+0x5f/0x70
[  171.217622][ T9275]  ? __this_cpu_preempt_check+0x18/0x20
[  171.223201][ T9275]  ? __local_bh_enable_ip+0x4d/0x70
[  171.228453][ T9275]  ? local_bh_enable+0x1b/0x20
[  171.233208][ T9275]  ? __dev_queue_xmit+0x59b/0xf90
[  171.238227][ T9275]  ? __skb_clone+0x2db/0x300
[  171.242849][ T9275]  ? __rcu_read_unlock+0x5c/0x290
[  171.247922][ T9275]  netlink_rcv_skb+0x14e/0x250
[  171.252788][ T9275]  ? rtnetlink_bind+0x60/0x60
[  171.257452][ T9275]  rtnetlink_rcv+0x18/0x20
[  171.261855][ T9275]  netlink_unicast+0x602/0x6d0
[  171.266763][ T9275]  netlink_sendmsg+0x728/0x850
[  171.271586][ T9275]  ? netlink_getsockopt+0x720/0x720
[  171.276773][ T9275]  ____sys_sendmsg+0x39a/0x510
[  171.281531][ T9275]  __sys_sendmsg+0x195/0x230
[  171.286158][ T9275]  __x64_sys_sendmsg+0x42/0x50
[  171.290916][ T9275]  do_syscall_64+0x44/0xd0
[  171.295325][ T9275]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  171.301279][ T9275] RIP: 0033:0x7f9256a96059
[  171.305681][ T9275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  171.325274][ T9275] RSP: 002b:00007f9255c0c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  171.333743][ T9275] RAX: ffffffffffffffda RBX: 00007f9256ba8f60 RCX: 00007f9256a96059
[  171.341714][ T9275] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005
[  171.349692][ T9275] RBP: 00007f9255c0c1d0 R08: 0000000000000000 R09: 0000000000000000
[  171.357651][ T9275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  171.365609][ T9275] R13: 00007ffd67de0e2f R14: 00007f9255c0c300 R15: 0000000000022000
23:06:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0) (fail_nth: 11)

23:06:07 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

[  171.373679][ T9275]  </TASK>
23:06:07 executing program 1:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2bb98205)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008035}, 0x8)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6(0xa, 0x80003, 0x6b)
r6 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'team0\x00', <r7=>0x0})
bind$packet(r6, &(0x7f0000000240)={0x11, 0x0, r7}, 0x14)
getsockname$packet(r6, &(0x7f00000022c0)={0x11, 0x0, <r8=>0x0}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x35000000, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeffffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0)

23:06:07 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000080)=0x80, 0x4)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_misc(r5, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async)
syz_io_uring_setup(0x2575, &(0x7f0000000180)={0x0, 0x517e, 0x0, 0x3, 0x180, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f000042d000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000200))

[  171.443175][ T9288] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  171.479507][ T9288] FAULT_INJECTION: forcing a failure.
[  171.479507][ T9288] name failslab, interval 1, probability 0, space 0, times 0
[  171.492224][ T9288] CPU: 0 PID: 9288 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller-00052-g359303076163-dirty #0
[  171.503190][ T9288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  171.513246][ T9288] Call Trace:
[  171.516616][ T9288]  <TASK>
[  171.519541][ T9288]  dump_stack_lvl+0xd6/0x122
[  171.524197][ T9288]  dump_stack+0x11/0x1b
[  171.528353][ T9288]  should_fail+0x23c/0x250
[  171.532771][ T9288]  __should_failslab+0x81/0x90
[  171.537574][ T9288]  should_failslab+0x5/0x20
23:06:07 executing program 5:
r0 = syz_io_uring_setup(0x113c, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
r5 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r5, r4)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10040, 0x0)
recvfrom$phonet(r6, &(0x7f0000000180)=""/232, 0xe8, 0x12060, &(0x7f00000000c0)={0x23, 0x6, 0x5c, 0xf9}, 0x10)
syz_io_uring_setup(0x113c, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r5, r4) (async)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10040, 0x0) (async)
recvfrom$phonet(r6, &(0x7f0000000180)=""/232, 0xe8, 0x12060, &(0x7f00000000c0)={0x23, 0x6, 0x5c, 0xf9}, 0x10) (async)

23:06:07 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
syz_io_uring_setup(0x5a9, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)

[  171.542152][ T9288]  kmem_cache_alloc_node_trace+0x61/0x310
[  171.547893][ T9288]  ? __kmalloc_node+0x30/0x40
[  171.552673][ T9288]  __kmalloc_node+0x30/0x40
[  171.557174][ T9288]  kvmalloc_node+0x6e/0xe0
[  171.561595][ T9288]  alloc_netdev_mqs+0x673/0x870
[  171.566456][ T9288]  ? tsan.module_ctor+0x10/0x10
[  171.571395][ T9288]  rtnl_create_link+0x22b/0x590
[  171.576339][ T9288]  rtnl_newlink+0xd2c/0x13e0
[  171.581021][ T9288]  ? __rcu_read_unlock+0x5c/0x290
[  171.586055][ T9288]  ? rtnl_setlink+0x2a0/0x2a0
[  171.590803][ T9288]  rtnetlink_rcv_msg+0x745/0x7e0
[  171.595893][ T9288]  ? ___cache_free+0x46/0x310
[  171.600667][ T9288]  ? kmem_cache_free+0x65/0x110
[  171.605592][ T9288]  ? __kfree_skb+0xfe/0x150
[  171.610108][ T9288]  ? consume_skb+0x48/0x160
[  171.614706][ T9288]  ? nlmon_xmit+0x5f/0x70
[  171.619079][ T9288]  ? __this_cpu_preempt_check+0x18/0x20
[  171.624678][ T9288]  ? __local_bh_enable_ip+0x4d/0x70
[  171.629972][ T9288]  ? local_bh_enable+0x1b/0x20
[  171.634862][ T9288]  ? __dev_queue_xmit+0x59b/0xf90
[  171.639946][ T9288]  ? __skb_clone+0x2db/0x300
[  171.644551][ T9288]  ? __rcu_read_unlock+0x5c/0x290
[  171.649729][ T9288]  netlink_rcv_skb+0x14e/0x250
[  171.654530][ T9288]  ? rtnetlink_bind+0x60/0x60
[  171.659256][ T9288]  rtnetlink_rcv+0x18/0x20
[  171.663678][ T9288]  netlink_unicast+0x602/0x6d0
[  171.668455][ T9288]  netlink_sendmsg+0x728/0x850
[  171.673238][ T9288]  ? netlink_getsockopt+0x720/0x720
[  171.678499][ T9288]  ____sys_sendmsg+0x39a/0x510
[  171.683276][ T9288]  __sys_sendmsg+0x195/0x230
[  171.687875][ T9288]  __x64_sys_sendmsg+0x42/0x50
[  171.692698][ T9288]  do_syscall_64+0x44/0xd0
[  171.697127][ T9288]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  171.703032][ T9288] RIP: 0033:0x7f9256a96059
[  171.707448][ T9288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  171.727056][ T9288] RSP: 002b:00007f9255c0c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  171.735476][ T9288] RAX: ffffffffffffffda RBX: 00007f9256ba8f60 RCX: 00007f9256a96059
[  171.743677][ T9288] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005
[  171.751677][ T9288] RBP: 00007f9255c0c1d0 R08: 0000000000000000 R09: 0000000000000000
[  171.759653][ T9288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  171.767803][ T9288] R13: 00007ffd67de0e2f R14: 00007f9255c0c300 R15: 0000000000022000
[  171.775785][ T9288]  </TASK>
[  171.783582][   T24] audit: type=1400 audit(1645052767.974:252): avc:  denied  { create } for  pid=9293 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
23:06:08 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_misc(r5, &(0x7f0000000080)=ANY=[], 0x2bb98205)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_misc(r6, &(0x7f0000000080)=ANY=[], 0x2bb98205)
r7 = creat(&(0x7f0000000080)='./file0\x00', 0xa)
pipe(&(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
write$binfmt_misc(r9, &(0x7f0000000080)=ANY=[], 0x2bb98205)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000001c0), 0x4)
ioctl$AUTOFS_IOC_PROTOVER(r8, 0x80049363, &(0x7f0000000200))
fsconfig$FSCONFIG_SET_PATH(r7, 0x3, &(0x7f00000000c0)='\x00', &(0x7f0000000180)='./file0\x00', r9)
mmap$IORING_OFF_CQ_RING(&(0x7f000042e000/0x1000)=nil, 0x1000, 0x4, 0x10010, 0xffffffffffffffff, 0x8000000)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)

[  171.833015][   T24] audit: type=1400 audit(1645052767.984:253): avc:  denied  { ioctl } for  pid=9293 comm="syz-executor.1" path="socket:[40693]" dev="sockfs" ino=40693 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  171.891189][ T9313] device team_slave_0 entered promiscuous mode
[  171.904187][ T9313] device macvtap1 entered promiscuous mode
[  171.910043][ T9313] device team0 entered promiscuous mode
[  171.924623][ T9313] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  171.946507][ T9313] team0: Device macvtap1 is already an upper device of the team interface
[  171.965484][ T9313] device team0 left promiscuous mode
[  171.970982][ T9313] device team_slave_0 left promiscuous mode
23:06:08 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0) (fail_nth: 12)

[  172.070814][ T9327] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  172.090789][ T9327] FAULT_INJECTION: forcing a failure.
[  172.090789][ T9327] name failslab, interval 1, probability 0, space 0, times 0
[  172.103499][ T9327] CPU: 0 PID: 9327 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller-00052-g359303076163-dirty #0
[  172.114440][ T9327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  172.124499][ T9327] Call Trace:
[  172.127781][ T9327]  <TASK>
[  172.130712][ T9327]  dump_stack_lvl+0xd6/0x122
[  172.135321][ T9327]  dump_stack+0x11/0x1b
[  172.139538][ T9327]  should_fail+0x23c/0x250
[  172.143966][ T9327]  __should_failslab+0x81/0x90
[  172.148747][ T9327]  should_failslab+0x5/0x20
[  172.153264][ T9327]  kmem_cache_alloc_node+0x61/0x2d0
[  172.158641][ T9327]  ? __alloc_skb+0xf0/0x450
[  172.163189][ T9327]  __alloc_skb+0xf0/0x450
[  172.167528][ T9327]  netlink_ack+0x292/0x690
[  172.171994][ T9327]  ? __rcu_read_unlock+0x5c/0x290
[  172.177114][ T9327]  netlink_rcv_skb+0x1c7/0x250
[  172.181941][ T9327]  ? rtnetlink_bind+0x60/0x60
[  172.186731][ T9327]  rtnetlink_rcv+0x18/0x20
[  172.191154][ T9327]  netlink_unicast+0x602/0x6d0
[  172.195975][ T9327]  netlink_sendmsg+0x728/0x850
[  172.201273][ T9327]  ? netlink_getsockopt+0x720/0x720
[  172.206478][ T9327]  ____sys_sendmsg+0x39a/0x510
[  172.211250][ T9327]  __sys_sendmsg+0x195/0x230
[  172.216020][ T9327]  __x64_sys_sendmsg+0x42/0x50
[  172.220861][ T9327]  do_syscall_64+0x44/0xd0
[  172.225290][ T9327]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  172.231223][ T9327] RIP: 0033:0x7f9256a96059
[  172.235640][ T9327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  172.255253][ T9327] RSP: 002b:00007f9255c0c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  172.263705][ T9327] RAX: ffffffffffffffda RBX: 00007f9256ba8f60 RCX: 00007f9256a96059
23:06:08 executing program 1:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2bb98205)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008035}, 0x8)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6(0xa, 0x80003, 0x6b)
r6 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'team0\x00', <r7=>0x0})
bind$packet(r6, &(0x7f0000000240)={0x11, 0x0, r7}, 0x14)
getsockname$packet(r6, &(0x7f00000022c0)={0x11, 0x0, <r8=>0x0}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x35000000, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeffffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0)
pipe(&(0x7f0000000000)) (async)
write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) (async)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008035}, 0x8) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'team0\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6(0xa, 0x80003, 0x6b) (async)
socket(0x200000000000011, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'team0\x00'}) (async)
bind$packet(r6, &(0x7f0000000240)={0x11, 0x0, r7}, 0x14) (async)
getsockname$packet(r6, &(0x7f00000022c0), &(0x7f00000000c0)=0x14) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x35000000, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeffffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) (async)

23:06:08 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000080)=0x80, 0x4)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_misc(r5, &(0x7f0000000080)=ANY=[], 0x2bb98205)
syz_io_uring_setup(0x2575, &(0x7f0000000180)={0x0, 0x517e, 0x0, 0x3, 0x180, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f000042d000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000200))
syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)
setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000080)=0x80, 0x4) (async)
pipe(&(0x7f0000000000)) (async)
write$binfmt_misc(r5, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async)
syz_io_uring_setup(0x2575, &(0x7f0000000180)={0x0, 0x517e, 0x0, 0x3, 0x180, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f000042d000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) (async)

[  172.271733][ T9327] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005
[  172.279722][ T9327] RBP: 00007f9255c0c1d0 R08: 0000000000000000 R09: 0000000000000000
[  172.287719][ T9327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  172.295698][ T9327] R13: 00007ffd67de0e2f R14: 00007f9255c0c300 R15: 0000000000022000
[  172.303683][ T9327]  </TASK>
[  172.402672][ T9334] device team_slave_0 entered promiscuous mode
[  172.433275][ T9334] device macvtap1 entered promiscuous mode
[  172.439227][ T9334] device team0 entered promiscuous mode
[  172.477858][ T9334] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  172.500922][ T9334] team0: Device macvtap1 is already an upper device of the team interface
[  172.519735][ T9334] device team0 left promiscuous mode
23:06:08 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f000042d000/0x9000)=nil, 0x9000, 0x1000000, 0x13, r0, 0x0)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r9}, 0x0)
r10 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2}, 0x10)
syz_io_uring_submit(r5, r7, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001)
setsockopt$TIPC_GROUP_LEAVE(r8, 0x10f, 0x88)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

[  172.525245][ T9334] device team_slave_0 left promiscuous mode
23:06:08 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0) (fail_nth: 13)

23:06:08 executing program 1:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2bb98205)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008035}, 0x8)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6(0xa, 0x80003, 0x6b)
r6 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'team0\x00', <r7=>0x0})
bind$packet(r6, &(0x7f0000000240)={0x11, 0x0, r7}, 0x14)
getsockname$packet(r6, &(0x7f00000022c0)={0x11, 0x0, <r8=>0x0}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x35000000, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeffffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0)
pipe(&(0x7f0000000000)) (async)
write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) (async)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008035}, 0x8) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'team0\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6(0xa, 0x80003, 0x6b) (async)
socket(0x200000000000011, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'team0\x00'}) (async)
bind$packet(r6, &(0x7f0000000240)={0x11, 0x0, r7}, 0x14) (async)
getsockname$packet(r6, &(0x7f00000022c0), &(0x7f00000000c0)=0x14) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x35000000, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeffffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) (async)

23:06:08 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f000042d000/0x9000)=nil, 0x9000, 0x1000000, 0x13, r0, 0x0) (async)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r9}, 0x0) (async)
r10 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2}, 0x10) (async)
syz_io_uring_submit(r5, r7, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001) (async)
setsockopt$TIPC_GROUP_LEAVE(r8, 0x10f, 0x88) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

[  172.684212][ T9368] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  172.722293][ T9368] FAULT_INJECTION: forcing a failure.
[  172.722293][ T9368] name failslab, interval 1, probability 0, space 0, times 0
[  172.734993][ T9368] CPU: 1 PID: 9368 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller-00052-g359303076163-dirty #0
[  172.745937][ T9368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  172.755991][ T9368] Call Trace:
[  172.759277][ T9368]  <TASK>
[  172.762269][ T9368]  dump_stack_lvl+0xd6/0x122
[  172.766872][ T9368]  dump_stack+0x11/0x1b
[  172.771050][ T9368]  should_fail+0x23c/0x250
[  172.775580][ T9368]  __should_failslab+0x81/0x90
[  172.780360][ T9368]  should_failslab+0x5/0x20
[  172.784951][ T9368]  kmem_cache_alloc_node_trace+0x61/0x310
[  172.790679][ T9368]  ? __kmalloc_node_track_caller+0x30/0x40
[  172.796491][ T9368]  __kmalloc_node_track_caller+0x30/0x40
[  172.802134][ T9368]  ? netlink_ack+0x292/0x690
[  172.806769][ T9368]  __alloc_skb+0x19d/0x450
[  172.811207][ T9368]  netlink_ack+0x292/0x690
[  172.815636][ T9368]  ? __rcu_read_unlock+0x5c/0x290
[  172.820719][ T9368]  netlink_rcv_skb+0x1c7/0x250
[  172.825549][ T9368]  ? rtnetlink_bind+0x60/0x60
[  172.830290][ T9368]  rtnetlink_rcv+0x18/0x20
[  172.834711][ T9368]  netlink_unicast+0x602/0x6d0
[  172.839553][ T9368]  netlink_sendmsg+0x728/0x850
[  172.844397][ T9368]  ? netlink_getsockopt+0x720/0x720
[  172.849604][ T9368]  ____sys_sendmsg+0x39a/0x510
[  172.854416][ T9368]  __sys_sendmsg+0x195/0x230
[  172.859044][ T9368]  __x64_sys_sendmsg+0x42/0x50
[  172.863829][ T9368]  do_syscall_64+0x44/0xd0
[  172.868339][ T9368]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  172.874243][ T9368] RIP: 0033:0x7f9256a96059
[  172.878657][ T9368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  172.898296][ T9368] RSP: 002b:00007f9255beb168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  172.906713][ T9368] RAX: ffffffffffffffda RBX: 00007f9256ba9030 RCX: 00007f9256a96059
[  172.914707][ T9368] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004
[  172.922679][ T9368] RBP: 00007f9255beb1d0 R08: 0000000000000000 R09: 0000000000000000
[  172.930653][ T9368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  172.938624][ T9368] R13: 00007ffd67de0e2f R14: 00007f9255beb300 R15: 0000000000022000
[  172.946601][ T9368]  </TASK>
[  172.963790][ T9369] device team_slave_0 entered promiscuous mode
23:06:09 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_misc(r5, &(0x7f0000000080)=ANY=[], 0x2bb98205)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_misc(r6, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async)
r7 = creat(&(0x7f0000000080)='./file0\x00', 0xa)
pipe(&(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
write$binfmt_misc(r9, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000001c0), 0x4)
ioctl$AUTOFS_IOC_PROTOVER(r8, 0x80049363, &(0x7f0000000200))
fsconfig$FSCONFIG_SET_PATH(r7, 0x3, &(0x7f00000000c0)='\x00', &(0x7f0000000180)='./file0\x00', r9) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f000042e000/0x1000)=nil, 0x1000, 0x4, 0x10010, 0xffffffffffffffff, 0x8000000) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)

23:06:09 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f000042d000/0x9000)=nil, 0x9000, 0x1000000, 0x13, r0, 0x0)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r9}, 0x0)
r10 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2}, 0x10)
syz_io_uring_submit(r5, r7, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001)
setsockopt$TIPC_GROUP_LEAVE(r8, 0x10f, 0x88)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f000042d000/0x9000)=nil, 0x9000, 0x1000000, 0x13, r0, 0x0) (async)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000100)) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) (async)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r9}, 0x0) (async)
socket$tipc(0x1e, 0x2, 0x0) (async)
setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2}, 0x10) (async)
syz_io_uring_submit(r5, r7, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001) (async)
setsockopt$TIPC_GROUP_LEAVE(r8, 0x10f, 0x88) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)

[  172.985206][ T9369] device macvtap1 entered promiscuous mode
[  172.991089][ T9369] device team0 entered promiscuous mode
[  173.040616][ T9369] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  173.077294][ T9369] team0: Device macvtap1 is already an upper device of the team interface
[  173.115146][ T9369] device team0 left promiscuous mode
[  173.120789][ T9369] device team_slave_0 left promiscuous mode
23:06:09 executing program 5:
r0 = syz_io_uring_setup(0x113c, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
r5 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r5, r4)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10040, 0x0)
recvfrom$phonet(r6, &(0x7f0000000180)=""/232, 0xe8, 0x12060, &(0x7f00000000c0)={0x23, 0x6, 0x5c, 0xf9}, 0x10)

23:06:09 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_misc(r5, &(0x7f0000000080)=ANY=[], 0x2bb98205)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_misc(r6, &(0x7f0000000080)=ANY=[], 0x2bb98205)
r7 = creat(&(0x7f0000000080)='./file0\x00', 0xa)
pipe(&(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
write$binfmt_misc(r9, &(0x7f0000000080)=ANY=[], 0x2bb98205)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000001c0), 0x4)
ioctl$AUTOFS_IOC_PROTOVER(r8, 0x80049363, &(0x7f0000000200))
fsconfig$FSCONFIG_SET_PATH(r7, 0x3, &(0x7f00000000c0)='\x00', &(0x7f0000000180)='./file0\x00', r9)
mmap$IORING_OFF_CQ_RING(&(0x7f000042e000/0x1000)=nil, 0x1000, 0x4, 0x10010, 0xffffffffffffffff, 0x8000000)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)
pipe(&(0x7f0000000000)) (async)
write$binfmt_misc(r5, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async)
pipe(&(0x7f0000000000)) (async)
write$binfmt_misc(r6, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async)
creat(&(0x7f0000000080)='./file0\x00', 0xa) (async)
pipe(&(0x7f0000000000)) (async)
write$binfmt_misc(r9, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async)
ioctl$AUTOFS_IOC_PROTOVER(r8, 0x80049363, &(0x7f0000000200)) (async)
fsconfig$FSCONFIG_SET_PATH(r7, 0x3, &(0x7f00000000c0)='\x00', &(0x7f0000000180)='./file0\x00', r9) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f000042e000/0x1000)=nil, 0x1000, 0x4, 0x10010, 0xffffffffffffffff, 0x8000000) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async)

23:06:09 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000080)=0xdd)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:09 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0) (fail_nth: 14)

23:06:09 executing program 1:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2bb98205)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008035}, 0x8)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6(0xa, 0x80003, 0x6b)
r6 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'team0\x00', <r7=>0x0})
bind$packet(r6, &(0x7f0000000240)={0x11, 0x0, r7}, 0x14)
getsockname$packet(r6, &(0x7f00000022c0)={0x11, 0x0, <r8=>0x0}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x35000000, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeffffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0)

23:06:09 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @generic={0x3, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x80}, 0xf0f4, 0x0, 0x0, 0x0, 0xfd, &(0x7f0000000240)='syz_tun\x00'})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, <r6=>0x0, 0x0, <r7=>0x0, 0x0, ""/16, ""/16, ""/16, <r8=>0x0})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r8, @ANYRESHEX=r7, @ANYRESOCT=r6, @ANYBLOB="cf119b0511bf39bb761af8407b1ae02de7867492cf532ebd6e821d4f032d5184c890ef1e64d077f5557aa6ddf45522079a69c065473a4a299b5335f56dc15b5b074702488c69658608ca2df506932985fafaf9f340e624510f8b8975b29ed990230c0ef4372d76aecf60d8395b02d0e766ff41e485def8181a52f9d782dbfc30e8d0b3685caa358dc89f6e23e618c944d2b26f3235410d1ef40e28e995c9f6f5cc2b0484ac74e150f46278abef6b88136e61780f4b4229fe06cc152914c8d0f07b2c48eddc"]}, @name="28ce59dfc7ae9009f994fd025a0444dfebfb7061a5948c4662e39f8256c579834959742b871c005de3473b0e280182715450c02515a2c5d21e772323fe1657d3642995ef8d01878b4dbe5ede9690d2d84ca15da1e7c84eddf9aca1da186d54a296939e223b6265d68dfe21f81723d7a621f6f7aa2c89463dfc1d69dd148f62656028fc982be8c7a2e3db7886e44b9cdb10817a47ca82dde2e49bf7ea9a1b46194a6cbeb18135d16ce9bada1b60428b6ca93555de1e2ddd207dc9c27a6619bcc41e286831a35bd48f43f25533121478d86e7d0de744bdb0d916809fb565f85374cbaf7f4cd1a93720f63f44d1c97a87d72473869397b2fb08cdf9387a7448e463888dd126e3d9f50c5bf051e04d25c63adec3f2c51a8817c39f219b27c45bbda09415e0bfac248567c9305a3c315b3dace9e38c4e74a6e2ee113d04664499ceb5eb09c96110b2519cda7eb60f3a232cbc8612aba66257dbc4331619aba1949219079ab50af9774d5458bc1c7b220753b97bc0bca415c7185b1b17cecc72971abe4f746f1de7709e5310836bb4c0b6032a126074aa144162817627e876bec17c0f1097ff0434ee10e224bc5be76c5045a10a390830760c83ad960bd6994c6041870ca5ffc5552fe110623a3db1f20fd82f3696af69f30aeb07c5e4059a2634f5ebcb2f1d6464cfbaa981d170b600b6d0cddcc6cff8b43d289dfe2fb889fc7cae3a2fb4236ad58247d77561b646d95745fb3ff7424accfea99ec6f082da6d7c70fe94b3ec470dc6221f8af3ebdcfc13411e0021005bae03fcc3fc63e4c9779233bb798d848187111c0eae93d43a9f17673c95cd3241d4b6c6f073a81ed65b11c8558be0f17354f360d458301874afe6737e1477eb5b9f85beaf38f73e73409b8b9c13efeb44c11524fca25625f6cdf5096f0f109a84bfad42bdcb33a669cb178a6754a74f02ab9bccb040d5067f06909ac9b16d38e7cd83cb098fc6967354c0f3dc34a85b4393dce310abb803edbd2406637e03502c4e9b6ddd2ecc17514155743958322eda52bbadcfe23d6be9e5c20f066d4576e7e642b19e4578bc0ad247d01b399b78512e86aa1257d84a19cc87e9577085924297b3a2c5a037dc1c5f951c6323a728e6a5a18dec901c2394eee655df7ba19a3005bda0399f2aa951d450870dcd7f6dd205e623f2034135ad43fe6a572f00211b348219ea08e60e4983847bf0c966f4161bc9c321e1c4896bfc214ba6187da50cfb6bb600f5f357ddcf6c870893f537977f25ed88e093346fcf7e487480a03e5feba3043539a7bc6a8f9caaf478d971aa3711491d3b8243e08df7d3107a004db259865f00c65980a71399aaa1546678325f1ad823c5ac42b87aa87a6e9df14d710aab37fe2879857685d7e255d7ed20389dedef7e609981d70844808699cddd431cb43c24f6cab329ab62d2209d6d4aabd6f725d65aa060285b18e8da5442ccee5eb133401d2e7296790e0ff5fd704ae77279c305ffdde9cf2c38c453f9d3111cf091a853d196b649c9e4d2210e9806ff00bf67210a0fe0a908a51e64d49d78220f2d832222bbca3129f1399a0b526af79d7b598e4bbf2ce7a0c87fbae70cb1c015c4688912639ef7e86d1fe05a05c5b2d31e8a41f4e1cf54f0118b872a9351e69a7ce9e9ebc45cab02023ac2020422c67108b2b2c90de25c82f7d83fc2ab1a4561fd01bdc659a5ba5bb830dfcd308e8717bf193fc117b81eca101b0420825405448d5e89360f872fa7da544d70526b8e46f1667272e0e5e0aabbb207024cee92acd42de8cf88dfe9657df9fc49baba452c838ed655172ea101b49cf114b5e84ef41c82af855fcb41c2def9211b2fbb80718df94d9c9983df56f1d2162f2a24a0711c8528ae63d79e618a913c809b0cd8ea3f678580ed41b15eac9ac719b2f1d8c058004cefa6a8b93fdbfb6cd497b91349aa209e9401aa4040f9c627db8c7cbd2ba2620ff25762a2b0f9a536f88ddd3e4c9a82f435ca7073572a6b9d33a4a4781f5807986556cdbe6fec2a2172a0aa6c5a69c2232056488bf2ba99d85665e1fee7a2a6b6c2350e241fe28250c455c03dfc65dc96786f0e5cbb51ab87bd9d9d158faab451d7413da5a6aaa45073ef019c79c52e9de921b28b65e08211b800ef1683bfcad71daaf22ffee53df5e89044c2a326d47b9b280f3fe92cd67aa45d5464e680e90608b43206c5c760dea98e5d62bc920ed020900a033fea587e98a1079ed5487b19853986725eb68a53ee376fa4260bea626bca1814c2575545662bfedef988acb23156e56688b84dfaef74cbd9b3149acc3b4d58dcfa5d096e034ea5c908461a6a85067b6e4640d7b0f707c441102475742ce3e80af6828f5b80c172af605a3388f43589d79562394b473b49c3dcf3f67fba758451e191a8f5539b91e40766bb2c1bbed2a2193d7ac6bff747adc3df1e566aa2484b8d989daf327bdcaeaf289cba3e063772bd268f926f01fb76f23b5e7bc950635a2a653d2fee646e3bf7c855456be51d7ea8f3ecc43f9794dae591219492481d40e36bf7190ba4aa32e46b2400c0ab1ec1d2fc17e1cb8061fe94a2f01b1c44dfa7c0b2dd9438c8d103304e8f3bbbedfa6b1a302e10bd8d9fddca1c7954f4b9eb4ab47e91bc549eff21702a62875e01ca5ff8e61b25aa61b0d8c2c0f636c3202c068e1abbf47f259ebfce16560194b70409e6d15f185707da1ba8365e954c24d70481499587bf10f78c9a5cefc7e0b47636e7e8842f2a52fe3814091bdc40e525632fc42cdcfe7d8c0caedb8e2704502ec6ff139be06555523cb458031bdea1aed979aa7053683eae25eb0f7aa04ba06db9bfe5c3084d661f8026cf81a352a45d04312d12b9b3e1a1a5e34ca5219feaa7abe61c20d60745ca5039df6afbfb2d1a2ca3c7d66f1404ec5418e2f7fe2a0bb72b9d9ebca3a1c94247487416d95197ed5b6678a6bc313f70639b0e671eb805669232259360a6f1c8c019b30e5a13d897ec9a18166b06a51de49f6d434ed08fe1fa899daa6837f8fc538657ab4b8e67b6fc66beae7b0454f00d3b7f520406e4b03609ce04137217c7a55da45fd21b1af18a7c4588ea6b453f4ac0cf4148f8b8eef01844a1eacc253cf56b93e59b7a110b5b9d6fa0d12a19c7ca11c81eb6a97b327d3f2a21364a02cb31d6b722a9928a57a934455473905d5d177ec57d798f0b8497e3702d00afe8ff20d54b6aae293fd6f7915448fc5494a1694402c377230c1ae15512bebaaf077d338aeab3604dbaa87a4dff5a9a9cc73cf7b0f2ae1953720414a352f91c905cb1b034363861a0735645c43a4eef1f7e77f270e42e55df8909ab81f50b16be2db6629efa8a316f1b6090f7705481c5152cc0886ff9794030573fe087dd55029b800375c102d596eed0c56581b7b60de12be1bfaa586bf7ac2988f87e9f79fc655284b02b9a6e48e68c70e9e7623cdc441bf8f4ede01abf16850bbbaa5546780b22096639243501e302a26ea901f589cc46ad20cd1b449d44710341b8944b33daf18a8a07fee2d6d582c098fa1ea15be8c19a482cb9b66096933e7a935dab7b6b78064ddc5aca9d670f05e178f7ec11a7759a7dc4134a62a076bddf1583724f53cdb6735fdf035c487049a582efbd383c132c0f1812b8b17b81a78ee9e0c0f0ef03f150b40e8dba014b7ebf14a5625a3f829cbfaed783010d2d152b87439b553ffe9dc2f18880fa3c8e3bd894afbff760d399af441b291b17c746ac18475cc68f65669ff36bf4a65b5dfb07b6f6f159efef98e56cbf2de04e1a6d632224597f50297355d683aa02e4088f019f3ad1b96cc9ed93184a5374ae78bf967c48092da50435ab0248f3f357021f23d1155cec96efc277a988f4c4e3de8c40181238ee851fcc04cb19a9ac5340d7c2ef34989f23e82c0adc0b05c6860c8b8f9c0e91b8228e1e3ea7ffd5d051210f83027ec9f1bab539d58e2553828c58274a8262c3114d9ce02d63608d5b6dfb142d80e6ad8c161dde7e9116887e8ec6af73c7b83abf046ee9e331c2a5420925b5ece25d711d4e0682b6ce2d9e983e992feeec14554a5a6057e8295c01c3d804be6973849730f7a843a08568ab8d141de44d974f5fc674935d8463a568e4c491154606b2e323038716584e0dbe67ab70014d01d3874e0b9f24cf1ece5fa03793dfa7b11243d7f6429958842b62330c8f89850cb5f8fe70cf68e71d49ba6ed53e702feafd0d1e5a658da4a47c88244a97e3a7002618f76c9965837a7f1ee394a8440df7cf1f191966df765d361056d5db3956626930fef1a89958a44b54eb53f7f573f1d9ead5d41a830b1fc2beeb555ddcbad949f6d413c41c73f9c42637852fc6d14b78ec9058fabdae49a8fdd1cd713dccc2cb19887da1a7e67d73ec5d004f5eaa92681423809eb6169de7223cd6479f494a8dd9dc9554535ea60ccb06a8447aa7e5d925fcbff4de1cfb74bfa13a95e3d3ede6d3ebfdad1ba37f88c4f4fe5dc3663d54879bdaa0a276971b56e4656b1fff27c6a3d227f5d7ca67dbc7bfb2292f15f3632dc7d0a85fd2a6a2d06dcd4dbf67ea4d6882d594048ae005259ec148671d35cbad59d2097fac024665d1361bea887647c49d84c005800f9923e382459e999ef28008e7057fd243a7606dfd010c6632504e6f438cbcb5fa0739f55e65ddd99033239dc8df3bb1a3f7c00263128d72bbfb078fd909c6855312b516ee7580adcf35358cc4d63cc6fbee890a15116fdfe3836671af25ff88c8f2545012a4332d015b6a3d71aaab84f2823a73698cdefbb8232137b19edd5e1572b7745de6caa2c7147e9492cf29e284651b575ed08efd0aa9eb7399a022427c89cf2c9c4ec364ba9b72ea09dc2cadb9070652baadd18a1f78138b09c384d4383c5d5f091b58015d98e3f1d8a9aca5f805740658e1171c2a48ae88272890882fa865a8728bb733eb827d5f2b19348af28c933abca596fe6d959221ec2f8de2516b2b29624c62f13a5a6ac8249a19538dcd00ce538393a06c25418ba80bd49ea0a3479801dca9be79752745b2dce441e15c3a4684e7eae98f8932936c30c658fa5d669541d342786fc91a61f566ae6b02db3700add11c81d4e82da126295ab6451ad11db35a1f66ae039d7fd88f9c5cbed848292b4cfa9697315a5be50a0350d0466e8d6b5f00d0d4a2f8f55234a9fc20d45d0dd13aa0a4ebbee89259af4223a6aa9ca08624a2da75f639436d564f6bea795b9d9eda1b862fd423f08cb1c2a921a56507a2195863f3339b932ac0da21bb5b7834a6a964a38f367479452c08bd3ec30b1c4bd389fdf550456e7d06448cfcee499f3e565fa419bf6e7a0d47bcb312b6809198800cd353f4306cc28fa625fda8509094824b89b8de2d92bdfb65802f558db3f7839886049aec113307de7b40701015e5c043940be1f8fdd9b767c54607fbfc8eec0520b53ce2059debdcc99f602e9db12c5cb9c034669e22fbe7bd0525bfb9464c6aba7454f015a6a6fb9d5da687ce1fc0c151b7fd72e00c95449663f8cea68f09258bc9bacf223a20bba6489149d2a0f8d1bccbdb32d1ff18bafd0fd6eb4b8252e870da204bac6895753e112fb5b2b2f604865ddc68e9696cdf175e3ec96d42d1071ce19911949b3735b52c5b18cf9480141087146a4d32081ef09473cfd61a714c2cb70eca00"})
r9 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r10 = perf_event_open(&(0x7f0000001940)={0x3, 0x80, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x4000, 0xfffffffffffffffe, 0xc6, 0x2, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, <r11=>0x0, <r12=>0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r10, 0x50009418, &(0x7f0000000400)={{}, r12, 0x14, @inherit={0x88, &(0x7f0000001580)=ANY=[@ANYRES16=r13]}, @devid})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r14=>0x0}})
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r15=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r15, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$PERF_EVENT_IOC_SET_FILTER(r15, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
sendmsg$NLBL_CIPSOV4_C_REMOVE(r15, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32=r14, @ANYRES32=r13, @ANYRESOCT, @ANYRES32=r11, @ANYRES32, @ANYRES64, @ANYRESHEX=r9], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000059140)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {0x0, r11}], 0x57, "22aebf2f6601d8"})
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

[  173.811184][ T9422] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  173.828092][ T9428] device team_slave_0 entered promiscuous mode
[  173.835421][ T9422] FAULT_INJECTION: forcing a failure.
[  173.835421][ T9422] name failslab, interval 1, probability 0, space 0, times 0
[  173.848068][ T9422] CPU: 0 PID: 9422 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller-00052-g359303076163-dirty #0
[  173.859045][ T9422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  173.869127][ T9422] Call Trace:
[  173.872401][ T9422]  <TASK>
[  173.875336][ T9422]  dump_stack_lvl+0xd6/0x122
[  173.879929][ T9422]  dump_stack+0x11/0x1b
[  173.884113][ T9422]  should_fail+0x23c/0x250
[  173.888534][ T9422]  ? skb_clone+0x12c/0x1f0
[  173.893067][ T9422]  __should_failslab+0x81/0x90
[  173.897842][ T9422]  should_failslab+0x5/0x20
[  173.902347][ T9422]  kmem_cache_alloc+0x4f/0x320
[  173.907388][ T9422]  skb_clone+0x12c/0x1f0
[  173.911687][ T9422]  netlink_deliver_tap+0x2da/0x510
[  173.916819][ T9422]  netlink_unicast+0x429/0x6d0
[  173.921590][ T9422]  netlink_ack+0x62e/0x690
[  173.926418][ T9422]  ? __rcu_read_unlock+0x5c/0x290
[  173.931450][ T9422]  netlink_rcv_skb+0x1c7/0x250
[  173.936389][ T9422]  ? rtnetlink_bind+0x60/0x60
[  173.941337][ T9422]  rtnetlink_rcv+0x18/0x20
[  173.945761][ T9422]  netlink_unicast+0x602/0x6d0
[  173.950557][ T9422]  netlink_sendmsg+0x728/0x850
[  173.955349][ T9422]  ? netlink_getsockopt+0x720/0x720
23:06:10 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000080)=0xdd)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000080)=0xdd) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)

[  173.960748][ T9422]  ____sys_sendmsg+0x39a/0x510
[  173.965620][ T9422]  __sys_sendmsg+0x195/0x230
[  173.970268][ T9422]  __x64_sys_sendmsg+0x42/0x50
[  173.975139][ T9422]  do_syscall_64+0x44/0xd0
[  173.979622][ T9422]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  173.985517][ T9422] RIP: 0033:0x7f9256a96059
[  173.989923][ T9422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  174.009666][ T9422] RSP: 002b:00007f9255c0c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  174.018103][ T9422] RAX: ffffffffffffffda RBX: 00007f9256ba8f60 RCX: 00007f9256a96059
[  174.026198][ T9422] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005
[  174.034201][ T9422] RBP: 00007f9255c0c1d0 R08: 0000000000000000 R09: 0000000000000000
[  174.042177][ T9422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  174.050249][ T9422] R13: 00007ffd67de0e2f R14: 00007f9255c0c300 R15: 0000000000022000
[  174.058324][ T9422]  </TASK>
[  174.064779][ T9428] device macvtap1 entered promiscuous mode
[  174.070596][ T9428] device team0 entered promiscuous mode
[  174.077435][ T9428] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  174.085646][ T9428] team0: Device macvtap1 is already an upper device of the team interface
[  174.094651][ T9428] device team0 left promiscuous mode
[  174.100107][ T9428] device team_slave_0 left promiscuous mode
23:06:10 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async, rerun: 64)
perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000080)=0xdd) (async, rerun: 32)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (rerun: 32)

23:06:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0) (fail_nth: 15)

[  174.158684][ T9429] Y­4��`Ò˜: renamed from lo
[  174.231750][ T9469] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  174.272117][ T9469] FAULT_INJECTION: forcing a failure.
[  174.272117][ T9469] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  174.285229][ T9469] CPU: 0 PID: 9469 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller-00052-g359303076163-dirty #0
[  174.296172][ T9469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  174.306226][ T9469] Call Trace:
[  174.309504][ T9469]  <TASK>
[  174.312428][ T9469]  dump_stack_lvl+0xd6/0x122
[  174.317032][ T9469]  dump_stack+0x11/0x1b
[  174.321256][ T9469]  should_fail+0x23c/0x250
[  174.325676][ T9469]  should_fail_usercopy+0x16/0x20
[  174.330703][ T9469]  _copy_to_user+0x1c/0x90
[  174.335177][ T9469]  simple_read_from_buffer+0xab/0x120
[  174.340550][ T9469]  proc_fail_nth_read+0x10d/0x150
[  174.345602][ T9469]  ? proc_fault_inject_write+0x230/0x230
[  174.351372][ T9469]  vfs_read+0x1e6/0x750
[  174.355540][ T9469]  ? __fget_files+0x1d2/0x210
[  174.360225][ T9469]  ksys_read+0xd9/0x190
[  174.364404][ T9469]  __x64_sys_read+0x3e/0x50
[  174.368915][ T9469]  do_syscall_64+0x44/0xd0
[  174.373368][ T9469]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  174.379269][ T9469] RIP: 0033:0x7f9256a48c0c
[  174.383754][ T9469] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[  174.403365][ T9469] RSP: 002b:00007f9255c0c160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  174.411827][ T9469] RAX: ffffffffffffffda RBX: 00007f9256ba8f60 RCX: 00007f9256a48c0c
23:06:10 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x2, 0x6, 0xf9, 0xb8, 0x0, 0x3, 0x20000, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000080)}, 0x800, 0x1f, 0x3, 0x7, 0x20, 0x1010, 0xfffb, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xc, r4, 0xa)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:10 executing program 0:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001180))
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000f80)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0xa080}, 0x0, {0x0, r4}}, 0x3db)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x111000, 0x0)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0)
r7 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10)
sendmsg$tipc(r7, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0)
clock_gettime(0x0, &(0x7f0000001100)={<r8=>0x0, <r9=>0x0})
recvmmsg(r7, &(0x7f0000001000)=[{{&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000200)=""/142, 0x8e}, {&(0x7f0000000340)=""/140, 0x8c}, {&(0x7f0000000400)=""/144, 0x90}, {&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/228, 0xe4}], 0x6, &(0x7f0000000800)=""/171, 0xab}, 0x1}, {{&(0x7f00000008c0)=@qipcrtr, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/112, 0x70}, {&(0x7f00000009c0)=""/48, 0x30}], 0x2}, 0x10000}, {{&(0x7f0000000a40)=@alg, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000ac0)=""/2, 0x2}, {&(0x7f0000000b00)=""/14, 0xe}, {&(0x7f0000000b40)=""/120, 0x78}, {&(0x7f0000000bc0)=""/153, 0x99}, {&(0x7f0000000c80)=""/172, 0xac}, {&(0x7f0000000d40)=""/27, 0x1b}, {&(0x7f0000000d80)=""/52, 0x34}, {&(0x7f0000000dc0)=""/95, 0x5f}], 0x8, &(0x7f0000000ec0)=""/34, 0x22}, 0x10000}, {{&(0x7f0000000f00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/24, 0x18}, 0x7}], 0x4, 0x0, &(0x7f0000001140)={r8, r9+60000000})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
write$binfmt_misc(r10, &(0x7f0000000080)=ANY=[], 0x2bb98205)
io_uring_enter(r10, 0x4810, 0x1609, 0x2, &(0x7f00000005c0)={[0xb8b]}, 0x8)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:10 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @generic={0x3, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x80}, 0xf0f4, 0x0, 0x0, 0x0, 0xfd, &(0x7f0000000240)='syz_tun\x00'}) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, <r6=>0x0, 0x0, <r7=>0x0, 0x0, ""/16, ""/16, ""/16, <r8=>0x0})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r8, @ANYRESHEX=r7, @ANYRESOCT=r6, @ANYBLOB="cf119b0511bf39bb761af8407b1ae02de7867492cf532ebd6e821d4f032d5184c890ef1e64d077f5557aa6ddf45522079a69c065473a4a299b5335f56dc15b5b074702488c69658608ca2df506932985fafaf9f340e624510f8b8975b29ed990230c0ef4372d76aecf60d8395b02d0e766ff41e485def8181a52f9d782dbfc30e8d0b3685caa358dc89f6e23e618c944d2b26f3235410d1ef40e28e995c9f6f5cc2b0484ac74e150f46278abef6b88136e61780f4b4229fe06cc152914c8d0f07b2c48eddc"]}, @name="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"}) (async)
r9 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r10 = perf_event_open(&(0x7f0000001940)={0x3, 0x80, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x4000, 0xfffffffffffffffe, 0xc6, 0x2, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, <r11=>0x0, <r12=>0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r10, 0x50009418, &(0x7f0000000400)={{}, r12, 0x14, @inherit={0x88, &(0x7f0000001580)=ANY=[@ANYRES16=r13]}, @devid}) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r14=>0x0}}) (async)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r15=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r15, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$PERF_EVENT_IOC_SET_FILTER(r15, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
sendmsg$NLBL_CIPSOV4_C_REMOVE(r15, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32=r14, @ANYRES32=r13, @ANYRESOCT, @ANYRES32=r11, @ANYRES32, @ANYRES64, @ANYRESHEX=r9], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000059140)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {0x0, r11}], 0x57, "22aebf2f6601d8"})
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

[  174.419802][ T9469] RDX: 000000000000000f RSI: 00007f9255c0c1e0 RDI: 0000000000000011
[  174.427838][ T9469] RBP: 00007f9255c0c1d0 R08: 0000000000000000 R09: 0000000000000000
[  174.435825][ T9469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  174.443796][ T9469] R13: 00007ffd67de0e2f R14: 00007f9255c0c300 R15: 0000000000022000
[  174.451827][ T9469]  </TASK>
23:06:10 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x80, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r4=>r0, {0xc2e8}}, './file0\x00'})
syz_io_uring_setup(0x4ca, &(0x7f0000000180)={0x0, 0x87cc, 0x1, 0x2, 0x157, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000200))
perf_event_open(&(0x7f0000000700)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x9}, 0x40, 0xfffffffffffffffc, 0x0, 0x4, 0x0, 0x80}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:06:10 executing program 1:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2bb98205)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008035}, 0x8)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6(0xa, 0x80003, 0x6b)
r6 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'team0\x00', <r7=>0x0})
bind$packet(r6, &(0x7f0000000240)={0x11, 0x0, r7}, 0x14)
getsockname$packet(r6, &(0x7f00000022c0)={0x11, 0x0, <r8=>0x0}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x35000000, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeffffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0)

23:06:11 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x80, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r4=>r0, {0xc2e8}}, './file0\x00'})
syz_io_uring_setup(0x4ca, &(0x7f0000000180)={0x0, 0x87cc, 0x1, 0x2, 0x157, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) (async)
perf_event_open(&(0x7f0000000700)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x9}, 0x40, 0xfffffffffffffffc, 0x0, 0x4, 0x0, 0x80}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:11 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x80, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r4=>r0, {0xc2e8}}, './file0\x00'})
syz_io_uring_setup(0x4ca, &(0x7f0000000180)={0x0, 0x87cc, 0x1, 0x2, 0x157, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) (async)
perf_event_open(&(0x7f0000000700)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x9}, 0x40, 0xfffffffffffffffc, 0x0, 0x4, 0x0, 0x80}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:11 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

[  174.853323][ T9494] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
23:06:11 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5}, 0x0)
syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000080)=@hci={0x1f, 0x4, 0x4}}, 0x55a)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:11 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async, rerun: 32)
r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async, rerun: 64)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x2, 0x6, 0xf9, 0xb8, 0x0, 0x3, 0x20000, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000080)}, 0x800, 0x1f, 0x3, 0x7, 0x20, 0x1010, 0xfffb, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xc, r4, 0xa) (async, rerun: 64)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

[  174.897873][ T9500] device team_slave_0 entered promiscuous mode
[  174.915355][ T9500] device macvtap1 entered promiscuous mode
[  174.921287][ T9500] device team0 entered promiscuous mode
[  174.941741][ T9500] 8021q: adding VLAN 0 to HW filter on device macvtap1
23:06:11 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x2, 0x6, 0xf9, 0xb8, 0x0, 0x3, 0x20000, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000080)}, 0x800, 0x1f, 0x3, 0x7, 0x20, 0x1010, 0xfffb, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xc, r4, 0xa)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

[  174.977297][ T9500] team0: Device macvtap1 is already an upper device of the team interface
[  175.006338][ T9500] device team0 left promiscuous mode
[  175.011815][ T9500] device team_slave_0 left promiscuous mode
23:06:11 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @generic={0x3, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x80}, 0xf0f4, 0x0, 0x0, 0x0, 0xfd, &(0x7f0000000240)='syz_tun\x00'})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, <r6=>0x0, 0x0, <r7=>0x0, 0x0, ""/16, ""/16, ""/16, <r8=>0x0})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r8, @ANYRESHEX=r7, @ANYRESOCT=r6, @ANYBLOB="cf119b0511bf39bb761af8407b1ae02de7867492cf532ebd6e821d4f032d5184c890ef1e64d077f5557aa6ddf45522079a69c065473a4a299b5335f56dc15b5b074702488c69658608ca2df506932985fafaf9f340e624510f8b8975b29ed990230c0ef4372d76aecf60d8395b02d0e766ff41e485def8181a52f9d782dbfc30e8d0b3685caa358dc89f6e23e618c944d2b26f3235410d1ef40e28e995c9f6f5cc2b0484ac74e150f46278abef6b88136e61780f4b4229fe06cc152914c8d0f07b2c48eddc"]}, @name="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"})
r9 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r10 = perf_event_open(&(0x7f0000001940)={0x3, 0x80, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x4000, 0xfffffffffffffffe, 0xc6, 0x2, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, <r11=>0x0, <r12=>0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r10, 0x50009418, &(0x7f0000000400)={{}, r12, 0x14, @inherit={0x88, &(0x7f0000001580)=ANY=[@ANYRES16=r13]}, @devid})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r14=>0x0}})
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r15=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r15, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$PERF_EVENT_IOC_SET_FILTER(r15, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
sendmsg$NLBL_CIPSOV4_C_REMOVE(r15, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32=r14, @ANYRES32=r13, @ANYRESOCT, @ANYRES32=r11, @ANYRES32, @ANYRES64, @ANYRESHEX=r9], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000059140)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {0x0, r11}], 0x57, "22aebf2f6601d8"})
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @generic={0x3, "c9f82881cf2383c34673609a3c75"}, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x80}, 0xf0f4, 0x0, 0x0, 0x0, 0xfd, &(0x7f0000000240)='syz_tun\x00'}) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) (async)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64=r8, @ANYRESHEX=r7, @ANYRESOCT=r6, @ANYBLOB="cf119b0511bf39bb761af8407b1ae02de7867492cf532ebd6e821d4f032d5184c890ef1e64d077f5557aa6ddf45522079a69c065473a4a299b5335f56dc15b5b074702488c69658608ca2df506932985fafaf9f340e624510f8b8975b29ed990230c0ef4372d76aecf60d8395b02d0e766ff41e485def8181a52f9d782dbfc30e8d0b3685caa358dc89f6e23e618c944d2b26f3235410d1ef40e28e995c9f6f5cc2b0484ac74e150f46278abef6b88136e61780f4b4229fe06cc152914c8d0f07b2c48eddc"]}, @name="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"}) (async)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000001940)={0x3, 0x80, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x4000, 0xfffffffffffffffe, 0xc6, 0x2, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) (async)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r10, 0x50009418, &(0x7f0000000400)={{}, r12, 0x14, @inherit={0x88, &(0x7f0000001580)=ANY=[@ANYRES16=r13]}, @devid}) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r15, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r15, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') (async)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r15, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32=r14, @ANYRES32=r13, @ANYRESOCT, @ANYRES32=r11, @ANYRES32, @ANYRES64, @ANYRESHEX=r9], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000059140)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {0x0, r11}], 0x57, "22aebf2f6601d8"}) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)

[  175.072269][ T9499] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
23:06:11 executing program 0:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001180)) (async)
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000f80)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0xa080}, 0x0, {0x0, r4}}, 0x3db) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x111000, 0x0)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
r7 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) (async)
sendmsg$tipc(r7, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) (async)
clock_gettime(0x0, &(0x7f0000001100)={<r8=>0x0, <r9=>0x0})
recvmmsg(r7, &(0x7f0000001000)=[{{&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000200)=""/142, 0x8e}, {&(0x7f0000000340)=""/140, 0x8c}, {&(0x7f0000000400)=""/144, 0x90}, {&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/228, 0xe4}], 0x6, &(0x7f0000000800)=""/171, 0xab}, 0x1}, {{&(0x7f00000008c0)=@qipcrtr, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/112, 0x70}, {&(0x7f00000009c0)=""/48, 0x30}], 0x2}, 0x10000}, {{&(0x7f0000000a40)=@alg, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000ac0)=""/2, 0x2}, {&(0x7f0000000b00)=""/14, 0xe}, {&(0x7f0000000b40)=""/120, 0x78}, {&(0x7f0000000bc0)=""/153, 0x99}, {&(0x7f0000000c80)=""/172, 0xac}, {&(0x7f0000000d40)=""/27, 0x1b}, {&(0x7f0000000d80)=""/52, 0x34}, {&(0x7f0000000dc0)=""/95, 0x5f}], 0x8, &(0x7f0000000ec0)=""/34, 0x22}, 0x10000}, {{&(0x7f0000000f00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/24, 0x18}, 0x7}], 0x4, 0x0, &(0x7f0000001140)={r8, r9+60000000}) (async)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
write$binfmt_misc(r10, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async)
io_uring_enter(r10, 0x4810, 0x1609, 0x2, &(0x7f00000005c0)={[0xb8b]}, 0x8)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:11 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:06:11 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0) (async)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5}, 0x0) (async)
syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000080)=@hci={0x1f, 0x4, 0x4}}, 0x55a) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:11 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

[  175.360864][ T9544] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  175.419130][ T9555] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
23:06:11 executing program 1:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2bb98205)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008035}, 0x8)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6(0xa, 0x80003, 0x6b)
r6 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'team0\x00', <r7=>0x0})
bind$packet(r6, &(0x7f0000000240)={0x11, 0x0, r7}, 0x14)
getsockname$packet(r6, &(0x7f00000022c0)={0x11, 0x0, <r8=>0x0}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x35000000, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeffffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0)

23:06:11 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:06:11 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5}, 0x0)
syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000080)=@hci={0x1f, 0x4, 0x4}}, 0x55a)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r6, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000100)) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) (async)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5}, 0x0) (async)
syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000080)=@hci={0x1f, 0x4, 0x4}}, 0x55a) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_submit(r6, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)

23:06:11 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x5, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x3f, 0x80, 0x2, 0xff, 0x0, 0x3, 0x40, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9ec6, 0x7, @perf_bp={&(0x7f0000000080), 0x4}, 0x2, 0x6, 0x9, 0x1, 0x2, 0x7, 0x3, 0x0, 0xd6, 0x0, 0xffffffffffffffff}, r6, 0x0, r4, 0x1)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:11 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:11 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r4 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

[  175.718257][ T9562] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  175.758393][ T9584] device team_slave_0 entered promiscuous mode
[  175.786317][ T9584] device macvtap1 entered promiscuous mode
[  175.792167][ T9584] device team0 entered promiscuous mode
[  175.826017][ T9584] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  175.853982][ T9584] team0: Device macvtap1 is already an upper device of the team interface
[  175.881533][ T9584] device team0 left promiscuous mode
[  175.886975][ T9584] device team_slave_0 left promiscuous mode
[  176.029515][ T9561] ==================================================================
[  176.037604][ T9561] BUG: KCSAN: data-race in io_wqe_enqueue / io_wqe_worker
[  176.044697][ T9561] 
[  176.046997][ T9561] write to 0xffff888136d9a304 of 4 bytes by task 9587 on cpu 1:
[  176.054596][ T9561]  io_wqe_worker+0x79/0x4f0
[  176.059081][ T9561]  ret_from_fork+0x1f/0x30
[  176.063477][ T9561] 
[  176.065786][ T9561] read to 0xffff888136d9a304 of 4 bytes by task 9561 on cpu 0:
[  176.073331][ T9561]  io_wqe_enqueue+0x381/0x740
[  176.078008][ T9561]  io_wq_enqueue+0x31/0x40
[  176.082428][ T9561]  io_queue_async_work+0x202/0x430
[  176.087519][ T9561]  __io_queue_sqe+0x44c/0x6a0
[  176.092172][ T9561]  io_req_task_submit+0x8b/0xf0
[  176.097001][ T9561]  tctx_task_work+0x8b2/0xc90
[  176.101656][ T9561]  task_work_run+0x8e/0x110
[  176.106151][ T9561]  exit_to_user_mode_prepare+0x102/0x190
[  176.111820][ T9561]  syscall_exit_to_user_mode+0x20/0x40
[  176.117434][ T9561]  do_syscall_64+0x50/0xd0
[  176.121828][ T9561]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  176.127779][ T9561] 
23:06:12 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:06:12 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
syz_io_uring_setup(0x5a9, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000100)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)

[  176.130097][ T9561] value changed: 0x00000004 -> 0x00000007
[  176.135794][ T9561] 
[  176.138100][ T9561] Reported by Kernel Concurrency Sanitizer on:
[  176.144311][ T9561] CPU: 0 PID: 9561 Comm: syz-executor.5 Not tainted 5.17.0-rc4-syzkaller-00052-g359303076163-dirty #0
[  176.155228][ T9561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  176.165259][ T9561] ==================================================================
23:06:12 executing program 0:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001180)) (async, rerun: 64)
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0) (rerun: 64)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async, rerun: 32)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async, rerun: 32)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000f80)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0xa080}, 0x0, {0x0, r4}}, 0x3db)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x111000, 0x0)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0)
r7 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) (async)
sendmsg$tipc(r7, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) (async, rerun: 64)
clock_gettime(0x0, &(0x7f0000001100)={<r8=>0x0, <r9=>0x0}) (rerun: 64)
recvmmsg(r7, &(0x7f0000001000)=[{{&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000200)=""/142, 0x8e}, {&(0x7f0000000340)=""/140, 0x8c}, {&(0x7f0000000400)=""/144, 0x90}, {&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/228, 0xe4}], 0x6, &(0x7f0000000800)=""/171, 0xab}, 0x1}, {{&(0x7f00000008c0)=@qipcrtr, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/112, 0x70}, {&(0x7f00000009c0)=""/48, 0x30}], 0x2}, 0x10000}, {{&(0x7f0000000a40)=@alg, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000ac0)=""/2, 0x2}, {&(0x7f0000000b00)=""/14, 0xe}, {&(0x7f0000000b40)=""/120, 0x78}, {&(0x7f0000000bc0)=""/153, 0x99}, {&(0x7f0000000c80)=""/172, 0xac}, {&(0x7f0000000d40)=""/27, 0x1b}, {&(0x7f0000000d80)=""/52, 0x34}, {&(0x7f0000000dc0)=""/95, 0x5f}], 0x8, &(0x7f0000000ec0)=""/34, 0x22}, 0x10000}, {{&(0x7f0000000f00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/24, 0x18}, 0x7}], 0x4, 0x0, &(0x7f0000001140)={r8, r9+60000000}) (async)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
write$binfmt_misc(r10, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async, rerun: 64)
io_uring_enter(r10, 0x4810, 0x1609, 0x2, &(0x7f00000005c0)={[0xb8b]}, 0x8) (rerun: 64)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:12 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x5, 0x0) (async)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x3f, 0x80, 0x2, 0xff, 0x0, 0x3, 0x40, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9ec6, 0x7, @perf_bp={&(0x7f0000000080), 0x4}, 0x2, 0x6, 0x9, 0x1, 0x2, 0x7, 0x3, 0x0, 0xd6, 0x0, 0xffffffffffffffff}, r6, 0x0, r4, 0x1) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

[  176.205584][ T9590] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
23:06:12 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:06:12 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x7, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

[  176.324256][ T9612] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  176.402551][ T9614] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
23:06:12 executing program 1:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2bb98205)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008035}, 0x8)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6(0xa, 0x80003, 0x6b)
r6 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'team0\x00', <r7=>0x0})
bind$packet(r6, &(0x7f0000000240)={0x11, 0x0, r7}, 0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x35000000, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeffffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0)

23:06:12 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:06:12 executing program 3:
r0 = syz_io_uring_setup(0x5a8, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0xc8800, 0x0)
io_uring_enter(r3, 0x62df, 0x7f59, 0x2, &(0x7f00000000c0)={[0x1]}, 0x8)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:12 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x5, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x3f, 0x80, 0x2, 0xff, 0x0, 0x3, 0x40, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9ec6, 0x7, @perf_bp={&(0x7f0000000080), 0x4}, 0x2, 0x6, 0x9, 0x1, 0x2, 0x7, 0x3, 0x0, 0xd6, 0x0, 0xffffffffffffffff}, r6, 0x0, r4, 0x1)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
getpid() (async)
sched_setscheduler(r6, 0x5, 0x0) (async)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x3f, 0x80, 0x2, 0xff, 0x0, 0x3, 0x40, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9ec6, 0x7, @perf_bp={&(0x7f0000000080), 0x4}, 0x2, 0x6, 0x9, 0x1, 0x2, 0x7, 0x3, 0x0, 0xd6, 0x0, 0xffffffffffffffff}, r6, 0x0, r4, 0x1) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)

23:06:12 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:06:12 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0)={0x0, 0x664d, 0x0, 0x0, 0x31}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=<r1=>0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f000042e000/0x2000)=nil, 0x2000, 0x4, 0x4000013, r0, 0x8000000)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0))
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r5, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/141, 0x8d}, {&(0x7f0000000280)=""/34, 0x22}, {&(0x7f0000000880)=""/52, 0x34}, {&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f00000004c0)=""/126, 0x7e}, {&(0x7f0000000540)=""/112, 0x70}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000640)=""/162, 0xa2}, {&(0x7f0000000a00)=""/182, 0xb6}], 0xa}, 0x0, 0x0, 0x1, {0xfffb}}, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000080), 0x5f, 0x0)
syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r6, 0xfffffffffffffff7, 0xffffffffffffffd5, 0x2d, 0x4, 0x1, {0x2}}, 0x75)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r7, r1, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

[  176.607334][ T9617] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
23:06:12 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:06:12 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0)={0x0, 0x664d, 0x0, 0x0, 0x31}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=<r1=>0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f000042e000/0x2000)=nil, 0x2000, 0x4, 0x4000013, r0, 0x8000000)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) (async)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r5, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/141, 0x8d}, {&(0x7f0000000280)=""/34, 0x22}, {&(0x7f0000000880)=""/52, 0x34}, {&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f00000004c0)=""/126, 0x7e}, {&(0x7f0000000540)=""/112, 0x70}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000640)=""/162, 0xa2}, {&(0x7f0000000a00)=""/182, 0xb6}], 0xa}, 0x0, 0x0, 0x1, {0xfffb}}, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000080), 0x5f, 0x0)
syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r6, 0xfffffffffffffff7, 0xffffffffffffffd5, 0x2d, 0x4, 0x1, {0x2}}, 0x75) (async)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r7, r1, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

[  176.662764][ T9627] device team_slave_0 entered promiscuous mode
[  176.670917][ T9627] device macvtap1 entered promiscuous mode
[  176.676782][ T9627] device team0 entered promiscuous mode
[  176.685572][ T9627] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  176.694374][ T9625] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
23:06:13 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0)={0x0, 0x664d, 0x0, 0x0, 0x31}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)=<r1=>0x0)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f000042e000/0x2000)=nil, 0x2000, 0x4, 0x4000013, r0, 0x8000000)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0))
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r5, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/141, 0x8d}, {&(0x7f0000000280)=""/34, 0x22}, {&(0x7f0000000880)=""/52, 0x34}, {&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f00000004c0)=""/126, 0x7e}, {&(0x7f0000000540)=""/112, 0x70}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000640)=""/162, 0xa2}, {&(0x7f0000000a00)=""/182, 0xb6}], 0xa}, 0x0, 0x0, 0x1, {0xfffb}}, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000080), 0x5f, 0x0)
syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r6, 0xfffffffffffffff7, 0xffffffffffffffd5, 0x2d, 0x4, 0x1, {0x2}}, 0x75)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r7, r1, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
syz_io_uring_setup(0x5a9, &(0x7f00000002c0)={0x0, 0x664d, 0x0, 0x0, 0x31}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f000042e000/0x2000)=nil, 0x2000, 0x4, 0x4000013, r0, 0x8000000) (async)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000100)) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) (async)
socket$inet_dccp(0x2, 0x6, 0x0) (async)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r5, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/141, 0x8d}, {&(0x7f0000000280)=""/34, 0x22}, {&(0x7f0000000880)=""/52, 0x34}, {&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f00000004c0)=""/126, 0x7e}, {&(0x7f0000000540)=""/112, 0x70}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000640)=""/162, 0xa2}, {&(0x7f0000000a00)=""/182, 0xb6}], 0xa}, 0x0, 0x0, 0x1, {0xfffb}}, 0x0) (async)
syz_open_dev$MSR(&(0x7f0000000080), 0x5f, 0x0) (async)
syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r6, 0xfffffffffffffff7, 0xffffffffffffffd5, 0x2d, 0x4, 0x1, {0x2}}, 0x75) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_submit(r7, r1, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)

23:06:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xb, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:06:13 executing program 3:
r0 = syz_io_uring_setup(0x5a8, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0xc8800, 0x0)
io_uring_enter(r3, 0x62df, 0x7f59, 0x2, &(0x7f00000000c0)={[0x1]}, 0x8) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:13 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0)={0x0, 0x7419, 0x10}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f000042d000/0x1000)=nil, 0x1000, 0x3, 0x80010, r0, 0x0)
r4 = mmap$IORING_OFF_SQES(&(0x7f000042d000/0x1000)=nil, 0x1000, 0x6, 0x20010, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r3, r4, &(0x7f0000000640)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x3, @remote, 'veth0_to_bond\x00'}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f00000001c0)="b7f581873f940f25235692f933762233cf901f45f62530f1cbd56471979fe30c63c5a4be365ef52b4568a1c8a657b321177688839fdcab3e4dfe720f59cdff359989ba795bff1243901a0fb15905d8e1c38e938b442ca4dda0245670d55b2f45a3ad8f920f6a533cacd2048bf6f6b4a9334798b58bb97e8f514c82fc5f0260342aa46ccef6b99d23fe2a0fed816ba0e1aeeaa975f1ccd4b55d81da35274ba2b58f63afc99d04d30c73ca82596ed53ef67d041b589ee6e76401da3981f63809fb265c30f2c66e191f17ecbc0c15058de13cab075d7a73de92610576395d6df7e6fc4412b2890d0d6ede3da9d3a8042097001140e41898", 0xf6}], 0x2, &(0x7f0000000380)=[{0x88, 0x10e, 0x8, "b4cb470c87eb05f812364598e3607ee5e2488477fb4f0141fe1981ab76da5d60cb539203da163f6017b3ef2e80690c21488f66904477f5c371d0058776ec7494dc06d4db38822fbd5d63e67d9caf57269ee032cdfb8848101c1f6046bcc33b23a9dd7af811489217a6df6e231f59574c66014fbaa8ec"}, {0xa8, 0x11, 0x2, "e91ab521f121dff34d8d87bc5926419ef638ec1a6a782d90059df89878e7a6d80c44b4bd246e49ae42984c096fa9164145eeda5cd439999ca8e16160b94b243e1410bbdaff619f7ac08986f192ea8bfb16deec5fee5773529026b0c4ebd19a5eb87ca16896b0b6eb811e751a9c5d7f5ba73e88b01deaf637d2881bfebde08b09155109ad3b862870d5a193c14070910b76"}, {0xd8, 0x0, 0x81, "baa65d1968610b79398e75fa2003fa494197b313e86aa69692eeb5760a8b4209375fc417c916a624549c181a03ca38fe991f4324fb4bcb006874fa93c1d57d1c80bcbbeb439f692cf0b38d78bde8069e6fe5529a31611ad4bc86df1519efc7f01e8ff1d5207baababb2fa7ca29267697a34385207ca6fa4e95fe7f18a4fe5c17896ce54c85cbfb84bdb4d9620929ee8f2c91d91fa4fa4076a2fe9bfac494ab0ccfdd40e5b1bcd015715d98c6b8cfe2cb592cd328bd85ada7d317fcfc9abead3d359f"}, {0x30, 0x116, 0x0, "12801e9a2ac81763d3d53f4f7d15b8c6bba06c53a658a6b7d8304f1f"}, {0x30, 0x118, 0xfa7, "ae8321191989754cdbf02e37578e4f89474d2a17a3d483f7bb834de2"}], 0x268}, 0x0, 0x1}, 0x6)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
r6 = socket$inet6(0xa, 0x5, 0x2)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000980)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r6, 0x0, &(0x7f0000000880)="a2a608e8f1ba9435cc5aeb35f08ad49487ae80108bf3b37bea93f9f1719bde6fc16a4de1454355aa1835d248435d860a4b599bcb06439be870c49decda628feb982c79e5c564c34005d47751b3c61db3e16610db54f541df71042310182419eb0b14bd6b00f28f4e8a8ad9b470d8597ae61cf133395d427b3ee45229981750c894cc72db0e5da110f6d7b05b2d278163935d98b66898798125427fb48aef1337fdfa0b7029141d85d3c8ba0dd4f54960d0775ddfcc9cd6ddeddddc7254a8b8730fa5cb61281b742b2c45e9608f835fb0ed7d1ace1ef6bd298c5aedf9700e45deac74a74b715b", 0xe6, 0x4fce8c36daa21fee, 0x1, {0x0, r7}}, 0x580f)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x2100}, 0x0)
r9 = getpid()
sched_setscheduler(r9, 0x5, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
write$binfmt_misc(r10, &(0x7f0000000080)=ANY=[], 0x2bb98205)
perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0xf1, 0x0, 0x401, 0x18, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000007c0), 0xc}, 0x0, 0xfffffffffffffff9, 0x8, 0x8, 0x8001, 0x6, 0xf2, 0x0, 0x8, 0x0, 0x9}, r9, 0xf, r10, 0x0)
syz_io_uring_setup(0x2936, &(0x7f0000000680)={0x0, 0x4997, 0x20, 0x3, 0xd2, 0x0, r0}, &(0x7f000042c000/0x2000)=nil, &(0x7f000042d000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000780))
io_uring_enter(r0, 0x381f, 0x0, 0x1, 0x0, 0x0)

23:06:13 executing program 1:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2bb98205)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008035}, 0x8)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6(0xa, 0x80003, 0x6b)
r6 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'team0\x00', <r7=>0x0})
bind$packet(r6, &(0x7f0000000240)={0x11, 0x0, r7}, 0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x35000000, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeffffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0)

23:06:13 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10)
bind$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x3}}, 0x10)
readv(r5, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186, 0xba}, {&(0x7f0000000080)=""/128, 0x80}], 0x2)

23:06:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:06:13 executing program 3:
r0 = syz_io_uring_setup(0x5a8, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0xc8800, 0x0)
io_uring_enter(r3, 0x62df, 0x7f59, 0x2, &(0x7f00000000c0)={[0x1]}, 0x8)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:13 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_setup(0x4708, &(0x7f0000000080)={0x0, 0x532d, 0x1, 0x3, 0x32b, 0x0, r0}, &(0x7f000042e000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0))
syz_io_uring_setup(0x252e, &(0x7f0000000200)={0x0, 0xb75f, 0x10, 0x5, 0x2ba}, &(0x7f000042d000/0x4000)=nil, &(0x7f000042f000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000340)=<r4=>0x0)
io_uring_enter(r0, 0x3da, 0x42e, 0x3, &(0x7f00000003c0)={[0x100000001]}, 0x8)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10)
sendmsg$tipc(r5, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x2, 0x2, 0x0, {0x0, 0x0, r5}}, 0x1f)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = mmap$IORING_OFF_CQ_RING(&(0x7f000042e000/0x2000)=nil, 0x2000, 0x2000000, 0x110, r0, 0x8000000)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r9=>0x0, &(0x7f0000000100)=<r10=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r11}, 0x0)
syz_io_uring_submit(r8, r10, &(0x7f0000000480)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x21}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x5)
syz_io_uring_submit(r6, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:13 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_setup(0x4708, &(0x7f0000000080)={0x0, 0x532d, 0x1, 0x3, 0x32b, 0x0, r0}, &(0x7f000042e000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)) (async)
syz_io_uring_setup(0x252e, &(0x7f0000000200)={0x0, 0xb75f, 0x10, 0x5, 0x2ba}, &(0x7f000042d000/0x4000)=nil, &(0x7f000042f000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000340)=<r4=>0x0)
io_uring_enter(r0, 0x3da, 0x42e, 0x3, &(0x7f00000003c0)={[0x100000001]}, 0x8)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10)
sendmsg$tipc(r5, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) (async)
syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x2, 0x2, 0x0, {0x0, 0x0, r5}}, 0x1f) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = mmap$IORING_OFF_CQ_RING(&(0x7f000042e000/0x2000)=nil, 0x2000, 0x2000000, 0x110, r0, 0x8000000) (async)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r9=>0x0, &(0x7f0000000100)=<r10=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r11}, 0x0)
syz_io_uring_submit(r8, r10, &(0x7f0000000480)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x21}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x5)
syz_io_uring_submit(r6, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xd, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:06:13 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_setup(0x4708, &(0x7f0000000080)={0x0, 0x532d, 0x1, 0x3, 0x32b, 0x0, r0}, &(0x7f000042e000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0))
syz_io_uring_setup(0x252e, &(0x7f0000000200)={0x0, 0xb75f, 0x10, 0x5, 0x2ba}, &(0x7f000042d000/0x4000)=nil, &(0x7f000042f000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000340)=<r4=>0x0)
io_uring_enter(r0, 0x3da, 0x42e, 0x3, &(0x7f00000003c0)={[0x100000001]}, 0x8)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10)
sendmsg$tipc(r5, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x2, 0x2, 0x0, {0x0, 0x0, r5}}, 0x1f)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = mmap$IORING_OFF_CQ_RING(&(0x7f000042e000/0x2000)=nil, 0x2000, 0x2000000, 0x110, r0, 0x8000000)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600)=<r9=>0x0, &(0x7f0000000100)=<r10=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r11}, 0x0)
syz_io_uring_submit(r8, r10, &(0x7f0000000480)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x21}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x5)
syz_io_uring_submit(r6, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async)
syz_io_uring_setup(0x4708, &(0x7f0000000080)={0x0, 0x532d, 0x1, 0x3, 0x32b, 0x0, r0}, &(0x7f000042e000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (async)
syz_io_uring_setup(0x252e, &(0x7f0000000200)={0x0, 0xb75f, 0x10, 0x5, 0x2ba}, &(0x7f000042d000/0x4000)=nil, &(0x7f000042f000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000340)) (async)
io_uring_enter(r0, 0x3da, 0x42e, 0x3, &(0x7f00000003c0)={[0x100000001]}, 0x8) (async)
socket$tipc(0x1e, 0x2, 0x0) (async)
bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) (async)
sendmsg$tipc(r5, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) (async)
syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x2, 0x2, 0x0, {0x0, 0x0, r5}}, 0x1f) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f000042e000/0x2000)=nil, 0x2000, 0x2000000, 0x110, r0, 0x8000000) (async)
syz_io_uring_setup(0x28d9, &(0x7f0000000080), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000100)) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) (async)
syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r11}, 0x0) (async)
syz_io_uring_submit(r8, r10, &(0x7f0000000480)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x21}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x5) (async)
syz_io_uring_submit(r6, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)

23:06:13 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x3, 0x0, {0x0, r0}, 0x7, 0xa, 0x0, {0x0, 0x0, r3}}, 0x50c)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

[  177.530417][ T9691] device macvtap2 entered promiscuous mode
[  177.566161][ T9691] 8021q: adding VLAN 0 to HW filter on device macvtap2
23:06:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:06:13 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
io_uring_enter(r0, 0x1ccb, 0xf4ee, 0x1, &(0x7f00000000c0)={[0x9]}, 0x8)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000080)={0x2, 0x7f7, 0xe5, &(0x7f0000000180)=""/229})

23:06:14 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0)={0x0, 0x7419, 0x10}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f000042d000/0x1000)=nil, 0x1000, 0x3, 0x80010, r0, 0x0)
r4 = mmap$IORING_OFF_SQES(&(0x7f000042d000/0x1000)=nil, 0x1000, 0x6, 0x20010, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r3, r4, &(0x7f0000000640)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x3, @remote, 'veth0_to_bond\x00'}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f00000001c0)="b7f581873f940f25235692f933762233cf901f45f62530f1cbd56471979fe30c63c5a4be365ef52b4568a1c8a657b321177688839fdcab3e4dfe720f59cdff359989ba795bff1243901a0fb15905d8e1c38e938b442ca4dda0245670d55b2f45a3ad8f920f6a533cacd2048bf6f6b4a9334798b58bb97e8f514c82fc5f0260342aa46ccef6b99d23fe2a0fed816ba0e1aeeaa975f1ccd4b55d81da35274ba2b58f63afc99d04d30c73ca82596ed53ef67d041b589ee6e76401da3981f63809fb265c30f2c66e191f17ecbc0c15058de13cab075d7a73de92610576395d6df7e6fc4412b2890d0d6ede3da9d3a8042097001140e41898", 0xf6}], 0x2, &(0x7f0000000380)=[{0x88, 0x10e, 0x8, "b4cb470c87eb05f812364598e3607ee5e2488477fb4f0141fe1981ab76da5d60cb539203da163f6017b3ef2e80690c21488f66904477f5c371d0058776ec7494dc06d4db38822fbd5d63e67d9caf57269ee032cdfb8848101c1f6046bcc33b23a9dd7af811489217a6df6e231f59574c66014fbaa8ec"}, {0xa8, 0x11, 0x2, "e91ab521f121dff34d8d87bc5926419ef638ec1a6a782d90059df89878e7a6d80c44b4bd246e49ae42984c096fa9164145eeda5cd439999ca8e16160b94b243e1410bbdaff619f7ac08986f192ea8bfb16deec5fee5773529026b0c4ebd19a5eb87ca16896b0b6eb811e751a9c5d7f5ba73e88b01deaf637d2881bfebde08b09155109ad3b862870d5a193c14070910b76"}, {0xd8, 0x0, 0x81, "baa65d1968610b79398e75fa2003fa494197b313e86aa69692eeb5760a8b4209375fc417c916a624549c181a03ca38fe991f4324fb4bcb006874fa93c1d57d1c80bcbbeb439f692cf0b38d78bde8069e6fe5529a31611ad4bc86df1519efc7f01e8ff1d5207baababb2fa7ca29267697a34385207ca6fa4e95fe7f18a4fe5c17896ce54c85cbfb84bdb4d9620929ee8f2c91d91fa4fa4076a2fe9bfac494ab0ccfdd40e5b1bcd015715d98c6b8cfe2cb592cd328bd85ada7d317fcfc9abead3d359f"}, {0x30, 0x116, 0x0, "12801e9a2ac81763d3d53f4f7d15b8c6bba06c53a658a6b7d8304f1f"}, {0x30, 0x118, 0xfa7, "ae8321191989754cdbf02e37578e4f89474d2a17a3d483f7bb834de2"}], 0x268}, 0x0, 0x1}, 0x6)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
r6 = socket$inet6(0xa, 0x5, 0x2) (async)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000980)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r6, 0x0, &(0x7f0000000880)="a2a608e8f1ba9435cc5aeb35f08ad49487ae80108bf3b37bea93f9f1719bde6fc16a4de1454355aa1835d248435d860a4b599bcb06439be870c49decda628feb982c79e5c564c34005d47751b3c61db3e16610db54f541df71042310182419eb0b14bd6b00f28f4e8a8ad9b470d8597ae61cf133395d427b3ee45229981750c894cc72db0e5da110f6d7b05b2d278163935d98b66898798125427fb48aef1337fdfa0b7029141d85d3c8ba0dd4f54960d0775ddfcc9cd6ddeddddc7254a8b8730fa5cb61281b742b2c45e9608f835fb0ed7d1ace1ef6bd298c5aedf9700e45deac74a74b715b", 0xe6, 0x4fce8c36daa21fee, 0x1, {0x0, r7}}, 0x580f) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x2100}, 0x0)
r9 = getpid()
sched_setscheduler(r9, 0x5, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
write$binfmt_misc(r10, &(0x7f0000000080)=ANY=[], 0x2bb98205)
perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0xf1, 0x0, 0x401, 0x18, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000007c0), 0xc}, 0x0, 0xfffffffffffffff9, 0x8, 0x8, 0x8001, 0x6, 0xf2, 0x0, 0x8, 0x0, 0x9}, r9, 0xf, r10, 0x0)
syz_io_uring_setup(0x2936, &(0x7f0000000680)={0x0, 0x4997, 0x20, 0x3, 0xd2, 0x0, r0}, &(0x7f000042c000/0x2000)=nil, &(0x7f000042d000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000780)) (async)
io_uring_enter(r0, 0x381f, 0x0, 0x1, 0x0, 0x0)

23:06:14 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xf, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:06:14 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
io_uring_enter(r0, 0x1ccb, 0xf4ee, 0x1, &(0x7f00000000c0)={[0x9]}, 0x8) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000080)={0x2, 0x7f7, 0xe5, &(0x7f0000000180)=""/229})

23:06:14 executing program 1:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2bb98205)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008035}, 0x8)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6(0xa, 0x80003, 0x6b)
r6 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'team0\x00', <r7=>0x0})
bind$packet(r6, &(0x7f0000000240)={0x11, 0x0, r7}, 0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x35000000, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeffffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0)

23:06:14 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x3, 0x0, {0x0, r0}, 0x7, 0xa, 0x0, {0x0, 0x0, r3}}, 0x50c)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:14 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) (async)
bind$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x3}}, 0x10) (async)
readv(r5, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186, 0xba}, {&(0x7f0000000080)=""/128, 0x80}], 0x2)

23:06:14 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
io_uring_enter(r0, 0x1ccb, 0xf4ee, 0x1, &(0x7f00000000c0)={[0x9]}, 0x8)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000080)={0x2, 0x7f7, 0xe5, &(0x7f0000000180)=""/229})

23:06:14 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x3, 0x0, {0x0, r0}, 0x7, 0xa, 0x0, {0x0, 0x0, r3}}, 0x50c)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x3, 0x0, {0x0, r0}, 0x7, 0xa, 0x0, {0x0, 0x0, r3}}, 0x50c) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)

23:06:14 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

[  178.384121][ T9762] device macvtap3 entered promiscuous mode
[  178.393503][ T9762] 8021q: adding VLAN 0 to HW filter on device macvtap3
23:06:14 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x11, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:06:14 executing program 2:
r0 = syz_io_uring_setup(0x10005a9, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3ff}, 0x0, 0x0, 0x1ff, 0x0, 0x1000000003, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r4 = syz_io_uring_setup(0x29bb, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x2, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x200000a, 0x11, r4, 0x10000000)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r7}}, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r10, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r9}}, 0x1)
syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x1, {0x0, r9}}, 0xfffffffc)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x12, 0x0, {0x0, r7}}, 0x6ec5)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:14 executing program 2:
r0 = syz_io_uring_setup(0x10005a9, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3ff}, 0x0, 0x0, 0x1ff, 0x0, 0x1000000003, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r4 = syz_io_uring_setup(0x29bb, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x2, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x200000a, 0x11, r4, 0x10000000)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r7}}, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r10, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r9}}, 0x1)
syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x1, {0x0, r9}}, 0xfffffffc)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x12, 0x0, {0x0, r7}}, 0x6ec5)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
syz_io_uring_setup(0x10005a9, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3ff}, 0x0, 0x0, 0x1ff, 0x0, 0x1000000003, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async)
syz_io_uring_setup(0x29bb, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x2, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) (async)
syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x200000a, 0x11, r4, 0x10000000) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r7}}, 0x1) (async)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r10, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r9}}, 0x1) (async)
syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x1, {0x0, r9}}, 0xfffffffc) (async)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x12, 0x0, {0x0, r7}}, 0x6ec5) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000) (async)

23:06:15 executing program 0:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0)={0x0, 0x7419, 0x10}, &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f000042d000/0x1000)=nil, 0x1000, 0x3, 0x80010, r0, 0x0)
r4 = mmap$IORING_OFF_SQES(&(0x7f000042d000/0x1000)=nil, 0x1000, 0x6, 0x20010, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r3, r4, &(0x7f0000000640)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x3, @remote, 'veth0_to_bond\x00'}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f00000001c0)="b7f581873f940f25235692f933762233cf901f45f62530f1cbd56471979fe30c63c5a4be365ef52b4568a1c8a657b321177688839fdcab3e4dfe720f59cdff359989ba795bff1243901a0fb15905d8e1c38e938b442ca4dda0245670d55b2f45a3ad8f920f6a533cacd2048bf6f6b4a9334798b58bb97e8f514c82fc5f0260342aa46ccef6b99d23fe2a0fed816ba0e1aeeaa975f1ccd4b55d81da35274ba2b58f63afc99d04d30c73ca82596ed53ef67d041b589ee6e76401da3981f63809fb265c30f2c66e191f17ecbc0c15058de13cab075d7a73de92610576395d6df7e6fc4412b2890d0d6ede3da9d3a8042097001140e41898", 0xf6}], 0x2, &(0x7f0000000380)=[{0x88, 0x10e, 0x8, "b4cb470c87eb05f812364598e3607ee5e2488477fb4f0141fe1981ab76da5d60cb539203da163f6017b3ef2e80690c21488f66904477f5c371d0058776ec7494dc06d4db38822fbd5d63e67d9caf57269ee032cdfb8848101c1f6046bcc33b23a9dd7af811489217a6df6e231f59574c66014fbaa8ec"}, {0xa8, 0x11, 0x2, "e91ab521f121dff34d8d87bc5926419ef638ec1a6a782d90059df89878e7a6d80c44b4bd246e49ae42984c096fa9164145eeda5cd439999ca8e16160b94b243e1410bbdaff619f7ac08986f192ea8bfb16deec5fee5773529026b0c4ebd19a5eb87ca16896b0b6eb811e751a9c5d7f5ba73e88b01deaf637d2881bfebde08b09155109ad3b862870d5a193c14070910b76"}, {0xd8, 0x0, 0x81, "baa65d1968610b79398e75fa2003fa494197b313e86aa69692eeb5760a8b4209375fc417c916a624549c181a03ca38fe991f4324fb4bcb006874fa93c1d57d1c80bcbbeb439f692cf0b38d78bde8069e6fe5529a31611ad4bc86df1519efc7f01e8ff1d5207baababb2fa7ca29267697a34385207ca6fa4e95fe7f18a4fe5c17896ce54c85cbfb84bdb4d9620929ee8f2c91d91fa4fa4076a2fe9bfac494ab0ccfdd40e5b1bcd015715d98c6b8cfe2cb592cd328bd85ada7d317fcfc9abead3d359f"}, {0x30, 0x116, 0x0, "12801e9a2ac81763d3d53f4f7d15b8c6bba06c53a658a6b7d8304f1f"}, {0x30, 0x118, 0xfa7, "ae8321191989754cdbf02e37578e4f89474d2a17a3d483f7bb834de2"}], 0x268}, 0x0, 0x1}, 0x6) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
r6 = socket$inet6(0xa, 0x5, 0x2)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000980)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r6, 0x0, &(0x7f0000000880)="a2a608e8f1ba9435cc5aeb35f08ad49487ae80108bf3b37bea93f9f1719bde6fc16a4de1454355aa1835d248435d860a4b599bcb06439be870c49decda628feb982c79e5c564c34005d47751b3c61db3e16610db54f541df71042310182419eb0b14bd6b00f28f4e8a8ad9b470d8597ae61cf133395d427b3ee45229981750c894cc72db0e5da110f6d7b05b2d278163935d98b66898798125427fb48aef1337fdfa0b7029141d85d3c8ba0dd4f54960d0775ddfcc9cd6ddeddddc7254a8b8730fa5cb61281b742b2c45e9608f835fb0ed7d1ace1ef6bd298c5aedf9700e45deac74a74b715b", 0xe6, 0x4fce8c36daa21fee, 0x1, {0x0, r7}}, 0x580f) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x2100}, 0x0) (async)
r9 = getpid()
sched_setscheduler(r9, 0x5, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
write$binfmt_misc(r10, &(0x7f0000000080)=ANY=[], 0x2bb98205) (async)
perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0xf1, 0x0, 0x401, 0x18, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000007c0), 0xc}, 0x0, 0xfffffffffffffff9, 0x8, 0x8, 0x8001, 0x6, 0xf2, 0x0, 0x8, 0x0, 0x9}, r9, 0xf, r10, 0x0)
syz_io_uring_setup(0x2936, &(0x7f0000000680)={0x0, 0x4997, 0x20, 0x3, 0xd2, 0x0, r0}, &(0x7f000042c000/0x2000)=nil, &(0x7f000042d000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000780))
io_uring_enter(r0, 0x381f, 0x0, 0x1, 0x0, 0x0)

23:06:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:06:15 executing program 2:
r0 = syz_io_uring_setup(0x10005a9, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3ff}, 0x0, 0x0, 0x1ff, 0x0, 0x1000000003, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async)
r4 = syz_io_uring_setup(0x29bb, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x2, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x200000a, 0x11, r4, 0x10000000) (async)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r7}}, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x1) (async)
mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r10, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r9}}, 0x1) (async)
syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x1, {0x0, r9}}, 0xfffffffc) (async)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x12, 0x0, {0x0, r7}}, 0x6ec5)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:15 executing program 1:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2bb98205)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008035}, 0x8)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6(0xa, 0x80003, 0x6b)
r6 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'team0\x00'})
getsockname$packet(r6, &(0x7f00000022c0)={0x11, 0x0, <r7=>0x0}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x35000000, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeffffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0)

23:06:15 executing program 3:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:15 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5241}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)

23:06:15 executing program 5:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) (async)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x13, r0, 0x0) (async)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r4 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32)
syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2100}, 0x0)
io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x6611000000000000)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10)
bind$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x3}}, 0x10) (async, rerun: 32)
readv(r5, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186, 0xba}, {&(0x7f0000000080)=""/128, 0x80}], 0x2) (rerun: 32)

23:06:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x25, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:06:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@delchain={0x3c, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x4}]}, 0x3c}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008090)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010004b0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000030000140003007465616d5f736c6176655f310000000008000a006c91c1f65b9c3abd7667d3c8c67bbf1e2c30bfef3b477c6ff13d900668205236f2e15536a9d990243089a948a8c785e596e1abbb2ecac5821b31c1d5", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x3c, 0x66, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xffe0, 0x8}, {0xffef, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x2f}]}, 0x3c}}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newnexthop={0x2c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x1}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000090)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x48, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0)

23:06:15 executing program 2:
r0 = syz_io_uring_setup(0x5a9, &(0x7f00000002c0), &(0x7f000042d000/0x2000)=nil, &(0x7f000042e000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0